Your ESP says “delivered.” Your inbox says otherwise.

InboxAlarm watches the DNS plumbing behind your email — SPF, DKIM, DMARC, blocklists — 24/7, and pings you the moment something breaks. With the exact failing record named.

See pricing How it works

1 in 6 legitimate emails never reaches the inbox (Validity 2025 benchmark, ~83.5% placement). Most senders find out from their revenue report.

IAInboxAlarm · Domain healthSample panel · watching

Sample · shop.example.com

One new tool away from a broken SPF record.

Your ESP would still say “delivered.” This panel watches the records that decide whether the message ever reaches the inbox — and alarms the moment one drifts.

SPF — sending authorisation

v=spf1 · include chain counted recursively · 9 of 10 DNS lookups used

Drift warning

DKIM — signature key

Selector s1 published · key valid · no rotation drift

Passing

DMARC — policy & reporting

p=quarantine · alignment on · rua reports flowing

Passing

Blocklists — major DNSBLs

Checked on schedule · a listing fires a critical alarm

Not listed

9 / 10SPF lookups used — one include left

3 of 4Sample checks passing right now

1Drift warning open, with the fix named

Alarm rules

What triggers an alarm — and how it reaches you

Auth breaks or changesSPF, DKIM or DMARC fails, or drifts from baseline.

Slack + email

Lookup drift startsThe SPF chain climbs toward the 10-lookup limit.

Warning

A blocklist lists youYour domain appears on a major DNSBL.

Critical

Sample seed check (directional): Gmail — Inbox · Outlook — Inbox · Yahoo — Inbox. Placement tests are roadmap; sample results are shown as samples, never as guarantees.

Every alarm names the exact record to fix — guided repair, not a raw error dump.

Sample — illustrative domain, checks and seed results.Your ESP says “delivered.” This says whether it arrived.

Authentication breaks silently. Nothing in your ESP flags it.

“Delivered” in your ESP dashboard means a receiving server accepted the message — not that it reached the inbox. Meanwhile:

Someone adds a new sending tool; an SPF include chains past the 10-DNS-lookup limit and SPF breaks.
A DKIM key rotates and the selector goes stale. A DMARC policy drifts to p=none.
Your domain lands on a blocklist and you find out when open rates crater.
Google Postmaster is free but Gmail-only, with no alerting and no drift detection.

A watchdog, not a test bench

Per-test tools sell you credits — you check when you remember. InboxAlarm watches around the clock and alerts you the moment auth breaks or drift starts, with the failing TXT record named in every alert. Connect your domain. We watch. You get a Slack ping before your next campaign dies.

Always-on

24/7 monitoring + alerts

SPF/DKIM/DMARC validity and blocklist status watched continuously — not when you remember to run a test.

Drift

SPF 10-lookup drift tracking

Lookup chains are counted recursively and you get warned before the limit breaks — a failure mode most tools surface only after delivery tanks.

Repair

Guided DNS repair

Every alert ships with the exact failing record and what changed, instead of a raw error dump.

Blocklists

Blocklist monitoring

Major DNSBLs checked on schedule; listings surface as critical alerts with next steps.

Agencies

Fifty domains, one dashboard

Agency tier: 50 client domains, 15-minute checks, 5 seats. White-label PDF reports and per-client alert routing are on the roadmap.

Honest

No hype, just plumbing

We never say “skyrocket your deliverability.” We say: here's exactly what broke and how to fix it.

How it works

Connect your domain
Add it to the watch list. We capture a baseline of your SPF, DKIM, DMARC, and blocklist state.
We check on schedule
Daily on Starter, hourly on Growth, every 15 minutes on Agency — plus blocklist checks.
Drift triggers an alert
Any auth failure, record change, or new listing fires an alert to email, Slack, or SMS with the exact fix.
You fix one record
Guided repair tells you the precise TXT change. Baseline advances; monitoring continues.