Simplify MTA-STS with hosted MTA-STS

Enforce TLS for mail delivery with two CNAME records. Manage policy and MX hosts in a dashboard. No web hosting required.

Get started

Trusted by 1,000+ companies

Hosted MTA-STS configuration and policy management

Hosted MTA-STS

Complete hosted MTA-STS solution

Hosted MTA-STS provides a dashboard-based interface for managing your MTA-STS policy instead of hosting a policy file yourself. Add two CNAME records once, then manage policy mode, max age, and MX hosts through the dashboard. No web hosting or certificate configuration required.

Hosted MTA-STS

Managed TLS policy

Enforce

Policy file preview

version: STSv1
mode: enforce
mx: smtp.google.com
max_age: 86400

MX hosts

smtp.google.com

DNS records

2 CNAMEs

Status

Verified

TLS enforcement

Secure mail delivery by default

MTA-STS tells sending servers to use TLS when delivering to your MX hosts. Hosted MTA-STS lets you choose enforce mode so mail is only accepted over encrypted connections, protecting against downgrade attacks.

No web hosting

Two CNAME records only

Traditional MTA-STS requires hosting a policy file on HTTPS. With hosted MTA-STS, add two CNAME records pointing to Suped and we host both the policy file and the DNS record for you. No web server or certificate setup needed.

Dashboard management

Update policy without DNS edits

Change your MTA-STS policy, max age, or MX hosts through a simple dashboard. No more editing text files or redeploying. Updates take effect as soon as you save, with no additional DNS changes required.

Policy modes

Testing before enforce

Start with testing mode to validate your configuration without affecting mail delivery. Once you confirm everything works, switch to enforce mode for full TLS protection.

Delegated authority

Manage MTA-STS without DNS access

Allow your IT or Security team to configure and update MTA-STS without needing administrative access to your DNS provider. Add the two CNAME records once, then all policy changes, including switching from testing to enforce mode, happen through the dashboard with no further DNS edits.

Automated DMARC means more time, less errors and faster results

Become DMARC compliant to stop landing in spam and protect yourself from impersonation attacks, automatically with no expertise.

The manual way

Experts only

Parsing raw XML aggregate reports (RUA)

Endless spreadsheet analysis

Complex DNS syntax management

No alerts for new threats

Reactive troubleshooting

Manually cross-referencing IP addresses

Lacks historical trend data

Automated DMARC

Automated with Suped

Everything you need for enterprise-grade DMARC management.

No expertise required

Real-time visual reporting

Proactive threat monitoring

Automated sender verification

Automated parsing and sender categorization

Automatically fix your deliverability problems

Continuous monitoring of authorized senders

Less than 90 days to enforcement vs 12+ months manually

Get started

Customers love Suped for DMARC monitoring

Read customer stories

Read the reviews

"Before using Suped, our biggest challenge was not knowing whether our emails were actually reaching inboxes or just disappearing into spam filters. We could measure opens and clicks, but we couldn't see the real delivery picture. It felt like flying blind."

John Porteous

Group IT Manager, Alliance Group

Start monitoring your DMARC reports today

What you'll get with Suped

Real-time DMARC report monitoring and analysis

Automated alerts for authentication failures

Clear recommendations to improve email deliverability

Protection against phishing and domain spoofing