Blogs
-
DMARC
The DMARC Onboarding Workflow for MSPs: From Discovery to p=reject
A step-by-step DMARC onboarding workflow for MSPs managing multiple client domains, from initial discovery to safe p=reject deployment.
-
DMARC
How AI Has Industrialized Business Email Compromise: What Changed in 2025-2026
AI has turned BEC from a targeted spear-phishing operation into an automated, scale-out threat. Emails now come from inside your own tenant, bypassing SPF and DKIM. Here is what you need to know.
-
DMARC
Why DMARC Reject Policy Sends You Backscatter Emails and How to Stop Them
You enabled DMARC p=reject and now your users get failure notifications from strangers. Here is why it happens and how to fix it.
-
Deliverability
How to Handle Exchange Online Quarantining Healthy Mailboxes Under EX1436407
When Microsoft Exchange Online starts quarantining healthy mailboxes under incident EX1436407, here is how to check, release, and rule out email authentication as the cause.
-
SPF
When Is It Safe to Remove SPF Hard Fail (-all)? The Decision Framework for Email Admins
Admins who set SPF hard fail (-all) as a temporary measure often do not know when they can safely remove it. Here is the framework to decide.
-
DMARC
Why DMARC Reject Sends You Backscatter Notifications -- And How to Stop Them
Enabling DMARC p=reject floods you with rejection notifications. Here is why it happens and how to use your DMARC aggregate reports to find and fix the source.
-
DMARC
Why ARC Failures Appear After a Mail Server Migration
Migrating your mail server can break the ARC (Authentication Results Certification) chain. Here is why this happens, what the ARC fail errors mean after a migration, and how to restore ARC validation after moving to a new MTA.
-
DMARC
How to Move Your DMARC Policy from p=none to p=reject Without Breaking Mail
Step-by-step guide to safely migrating from DMARC p=none to p=reject without accidentally blocking legitimate outbound mail.
-
Deliverability
How to Detect OneDrive Sync Failures Before Data Loss Accumulates
OneDrive sync clients can stop without notifying admins. Learn how to detect failures, recover unsaved work, and set up monitoring that catches the problem before users lose days of files.
-
DMARC
Why Your DMARC Aggregate Report Shows Thousands of Failures But Only a Handful of Messages Were Actually Rejected
DMARC aggregate reports often show massive failure counts that look alarming. Here is what those numbers actually mean and when to worry.