Services
Email Trust Review
Our email trust posture is unclear. We do not know our spoofing exposure. We have been told to fix DMARC but do not know where to start.
A focused, fixed-fee diagnostic of email authentication and sender trust posture across your domain estate — with a clear evidence pack and prioritised next steps.
The most immediately understandable buyer problem
Email spoofing, phishing, and sender impersonation are the most visible consequences of poor email trust posture. But the causes — gaps in SPF, DKIM, DMARC, MTA-STS, and TLS reporting — are often accumulated over years and rarely reviewed as a whole.
The Email Trust Review is a scoped diagnostic that applies the same assessment and advisory model as the Digital Trust Snapshot, focused entirely on the email integrity domain. It concentrates on email authentication controls, configuration patterns, governance gaps, and operational risks across the domain estate.
Best for
Organisations concerned about spoofing, sender reputation, phishing exposure, or email trust maturity. Also suited to organisations that have been told their email authentication needs attention but do not know where to start or what a safe remediation sequence looks like.
What is included
Typical areas of assessment
- SPF alignment and record hygiene
- DKIM selector and signing posture
- DMARC policy maturity and reporting configuration
- MTA-STS readiness and policy
- TLS-RPT configuration
- Third-party sender alignment and delegation
- Domain estate inventory and classification
- Governance and ownership interpretation
Not in scope
- Hands-on remediation or DNS changes
- Mailbox or user configuration
- Campaign performance or deliverability strategy
- Assessment of other trust signal domains
- Ongoing monitoring or managed services
For a view across all six trust signal domains, see the Digital Trust Snapshot.
Outputs
- Executive summary of current email trust posture
- Domain estate inventory with domains classified by role where possible
- Current controls assessment covering SPF, DKIM, DMARC, MX posture, and related observable controls
- Findings and evidence pack with source references
- Trust interpretation — what the findings mean operationally and in governance terms
- Prioritised action list covering remediation priorities, sequencing, and ownership considerations
- Third-party sender notes where applicable
- Readout session to walk through findings and answer questions
Three steps to a clear assessment
Confirm the domain estate in scope, relevant context, and any known sending systems, controls, or constraints.
Review observable email trust signals and configuration patterns across the domain estate. Identify control gaps and interpret the posture they create.
Provide a structured evidence pack, clear interpretation, and a prioritised action list so your team can decide what to address next and how.
Duration: one to two weeks depending on domain estate size and complexity. Delivery: remote-first.
Fixed fee, banded by domain count and complexity
Scope and pricing are agreed upfront. No hourly billing.
A short scoping conversation confirms the domain count, complexity, and cost before you commit. No prerequisite is required.
When to choose this — and when to start with the Snapshot
Choose the Email Trust Review when
- Email trust posture is the immediate and specific concern
- You want a focused diagnostic rather than a full assessment
- You need a clear evidence pack and prioritised next steps for internal remediation
- A scoped, lower-cost entry point is appropriate before committing to a broader engagement
Start with a Digital Trust Snapshot instead when
- You need a view across all trust signal domains, not just email
- Leadership needs a broader governance-ready evidence pack
- The problem scope is unclear and may extend beyond email trust
An Email Trust Review can also inform Digital Trust Advisory where periodic review of email trust posture is needed over time.
Ready to assess your email trust posture?
A short enquiry is all it takes. Scope and cost can be confirmed quickly from a domain count and a brief description of your situation.