Guard: know when your email configuration changes
A daily automated scan of one domain, with every change recorded. £7 a month.
No contract, no minimum term. Manage or cancel from your account or from the link in your Guard email, or write to support@maib.io.
Why configuration drifts
Email authentication is not a thing you finish. A provider adds an include to their own SPF record and your lookup count crosses ten. Someone sets up a new marketing platform and authorises it in a way that breaks alignment. A DNS change during an unrelated migration drops a record. A DKIM key gets rotated on one side only.
None of these announce themselves. You find out weeks later, from a customer who says they never got the invoice.
What Guard watches
- SPF record changed, become invalid, or crossed the ten-lookup ceiling
- DMARC record changed, removed, or its policy weakened
- DKIM selector evidence changed, for selectors that can be monitored
- MX records or inbound provider changed
- MTA-STS and TLS-RPT changed
- Configuration health moved materially in either direction
Every run is recorded as an immutable event with the records as they were, so the history answers "when did this change, and what was it before" rather than just "something is wrong now".
Notifications
Every run is recorded on Guard's page for your domain and on your account dashboard. When a run finds a meaningful change (a record added, removed or edited, a finding appearing or clearing, or the score dropping) a summary is emailed to the address used at checkout, at most once a day per domain. You can turn those emails off from the Guard page. The scan is daily, so a change is reported the day after it is published, not the moment it happens.
What Guard is not
It is not DMARC aggregate report processing. Your reports go to whatever address you put in your own
rua tag, and this product does not collect them. It is not inbox placement testing, and it does not
monitor blocklists.