Why does /audit return in ~3 seconds?

We read DNS and key email header fields only, use parallel resolvers with 2s timeouts, and return structured results with suggestions.

What is Proof‑of‑Scan?

We hash canonical JSON (sha256) and provide a Verify endpoint to recompute via multiple public DNS resolvers and compare hashes.

Do you store email bodies?

No. We never store bodies. We parse headers only, delete .eml right after parsing, and keep PDF/JSON for evidence.

Audit vs continuous monitoring — ROI

Configs drift and rules evolve. A single averted incident (e.g., SPF >10 or missing One‑Click on launch day) often saves more than a year of monitoring fees. Monitoring also provides a continuous, verifiable audit trail.

Start with a check

Back‑of‑the‑envelope

Traffic: 1M emails/month; CTR impact if throttled/spam‑foldered
Incident cost: campaign redo + discounts + engineering hours
Monitoring benefit: early detection + audit trail for stakeholders

Audit vs continuous monitoring — ROI

Start with a check

Back‑of‑the‑envelope

Next steps