Everything InboxAlarm watches, and what it deliberately doesn't do.
Record presence, syntax, and the 10-DNS-lookup limit counted recursively through includes — with warnings before you hit the wall.
Validates your selectors' published keys; catches stale or revoked keys after rotations.
Policy strength (none → quarantine → reject), alignment, and rua reporting status.
Major DNSBLs checked on schedule. A refused or inconclusive query is reported as inconclusive — never as “clean” or “listed”.
Every check diffs against your captured baseline; any change to auth records fires a critical alert.
Seed-network placement tests are in development and are not part of any plan today. We will sell them when a real seed network exists — and label the results directional samples even then.
Email on every plan; Slack + SMS on Growth and up. Critical-only SMS so your phone stays quiet.
Each alert names the exact failing record and what changed — a missing record, a lookup count against the 10 limit, a drifted policy — so the fix is obvious. Step-by-step repair guides, including per-registrar steps, are on the roadmap.
Health scores, alerts, and baselines programmatically.
No raw error dump. Each alarm diffs the live record against your captured baseline and shows exactly what changed, why it matters, and the record to fix.
We'd rather tell you what's roadmap than let you discover it after signup.
| Area | v1 reality |
|---|---|
| Sending email | InboxAlarm doesn't send mail. It's a monitor for the plumbing of mail you send elsewhere. |
| Content checks | No spam-word or copy checking in v1 — infrastructure signals only (auth, blocklists, drift). |
| SSO/SAML | Not in v1. Agency gets multi-seat access without SSO. |
| Placement tests | Not built yet — on the roadmap. We don't sell placement tests until a real seed network exists; when it ships, results will be labeled directional samples, never guarantees of inboxing. |