MTA-STS, TLS-RPT & BIMI checker

Check the records that force mail to you to travel encrypted, send you reports when that fails, and show your logo in inboxes.

Good to know

What is MTA-STS?: A policy that tells other mail servers to only deliver to you over an encrypted, verified connection. Without it, an attacker on the network can make mail fall back to unencrypted delivery.
What is TLS-RPT?: A DNS record with an address where mail providers send daily reports about encrypted deliveries to you that failed. Turn it on before moving MTA-STS from testing to enforce.
What does BIMI need?: A DMARC policy of quarantine or reject, an SVG logo in a specific format, and for Gmail and Apple Mail a verified mark certificate (VMC).

Checking by hand only tells you about right now. Spot Downtime checks your sites around the clock and alerts you by email, Slack or Discord.