Blog

Practical insights on email deliverability, security, and infrastructure — based on real findings from working with 450+ organizations.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Email Security

DMARC Enforcement Guide: Moving from p=none to p=reject Without Breaking Email

March 18, 2026

A step-by-step guide to moving your DMARC policy from p=none to p=reject without disrupting legitimate email. Includes common mistakes to avoid.

Email Security

Never Let Your Domain Expire (Hackers Are Watching)

March 13, 2026

An expired domain can become a major security risk. Here’s why you should never let your domain lapse.

Email Deliverability

Why Your Email Open Rates Drop After Verifying Your Domain

March 11, 2026

Verifying your email domain improves deliverability, but if done incorrectly it can temporarily destroy your open rates. Here’s why it happens and how to recover.

Email Deliverability

Why Your Gmail Emails Go to Spam (And How to Fix It)

March 3, 2026

Using Gmail for business emails, especially automations and batch sending, will likely land you in spam. Here’s why and what to do instead.

Email Deliverability

Why Small Batch Emails Can Trigger Gmail Sending Limits

February 25, 2026

Why a Google Drive link in a CRM batch email triggered spam flags and a Gmail sending limit error — and how proper domain authentication fixes it.

Email Security

Google.com Scam Sent via Gmail API - DMARC Passed, No Account Compromise

February 11, 2026

A scam email sent from @google.com passed SPF, DKIM, and DMARC without a compromised account. Here’s what it reveals about modern email threats.

Email Deliverability

Why Routing CRM Emails Through a Third-Party ESP Can Hurt Deliverability

February 4, 2026

A real-world look at whether CRM emails should be routed through a third-party ESP, and why proper infrastructure architecture matters for deliverability.

Email Deliverability

When to Separate Marketing Email From Your CRM

February 2, 2026

Should you use a 3rd party email provider for newsletters instead of your CRM? This post explains why emails go to spam, when a third-party tool helps, and when it won't.

Email header showing dmarc=fail action=oreject and compauth=none reason=451 — the fingerprint of Microsoft 365 silently overriding a DMARC p=reject policy

Email Security

How Microsoft 365 Silently Overrides DMARC p=reject as oreject

January 29, 2026

Microsoft 365 has a result code that doesn't appear in any DMARC RFC: oreject. When M365 sits behind a third-party gateway, p=reject policies get silently overridden — and Microsoft doesn't report it. Here's the mechanism, why the original M365 Groups framing was incomplete, and the receive-connector lockdown that actually fixes it.

Email Deliverability

How to Handle Bounces and Blocks Properly

January 28, 2026

Why treating all bounces the same is a mistake – and how to properly handle soft bounces, hard bounces, and blocks for better deliverability.

Email Security

When Vendors Control Your DNS: A Hidden DMARC Security Risk

January 26, 2026

A real-world example of how third-party DNS control can silently block DMARC visibility, redirect domain telemetry, and introduce serious email security and data exposure risks.

Email Deliverability

Why Email Reputation “Fixer” Tools Usually Make Things Worse

January 20, 2026

Why email reputation “fixer” tools and warm-up software often backfire and what actually works when your emails start landing in spam.