Privacy controls
CyberFurl can load analytics only after you opt in. Core product features work without analytics consent.
Validate your TLS-RPT (TLS Reporting) DNS record to receive aggregated reports about TLS failures on your mail servers. Monitor encryption health and fix issues proactively.
TLS-RPT (TLS Reporting) is an email security standard that enables domain owners to receive aggregated reports about TLS failures during SMTP connections. It works alongside MTA-STS to provide visibility into encryption issues that might otherwise go unnoticed, such as expired certificates, cipher mismatches, and man-in-the-middle attacks.
Without TLS-RPT, TLS failures on your mail servers go undetected. You won't know if legitimate senders are being rejected due to certificate problems or if attackers are performing downgrade attacks.
Publishing TLS-RPT without a valid rua URI, using an unmonitored mailbox for reports, and not correlating TLS-RPT failures with MTA-STS policy changes are common oversights.
Type your domain into the TLS-RPT checker.
We search for the _smtp._tls TXT record.
We parse v=TLSRPTv1 and verify the rua report URI.
Ensure the rua mailbox is monitored for TLS failure reports.
Verifies the presence and format of the _smtp._tls TXT record. Checks for v=TLSRPTv1 syntax and flags malformed or missing records.
Checks that the rua (Report URI for Aggregation) is properly configured and points to a valid HTTPS or mailto endpoint for receiving reports.
Parses the full TLS-RPT record for correct tag-value pairs, validates the version string, and detects duplicate or conflicting directives.
TLS-RPT reports certificate expiry, cipher mismatch, STARTTLS stripping, and connection timeouts. Monitor these to maintain email security.
TLS-RPT works best with MTA-STS. Use both together — MTA-STS enforces TLS, and TLS-RPT reports on failures. A powerful security pair.
Displays the full TLS-RPT record in a clean, copyable format. Use for documentation, DNS configuration, or audit reports.
Automate TLS-RPT, MTA-STS, and certificate checks. Get alerted when TLS failures occur, certificates expire, or encryption policies drift across your email infrastructure.