Invoices, password resets, outreach, and the one message that had to get through. We audit how your mail actually travels, fix what is sending it to spam, and watch it so it does not drift.
Three pieces of one job. Finding out what is actually happening to your mail, changing what is wrong, and noticing when it goes wrong again.
We send you test addresses. You send the same message from the systems that already speak as your domain. We compare the receiving side: authentication and alignment, the originating IP against blocklists and reverse DNS, and content that looks like spam to a filter. The route that differs is the diagnosis. A published SPF record that looks fine is not the same as a mailbox that arrived.
The report is not the end. We fix the records, the sending path, the headers, and the content issues the audit named, and we check the same routes again so you can see the difference. If the only gap is DNS that was never published, that is the security and compliance work, linked rather than duplicated here.
Deliverability decays. A tool gets added, a signature fails, an IP lands on a list, and nobody notices until a customer says the invoice never came. After the fix we keep watching, and we tell you when a route changes.
SPF, DKIM, and DMARC, including whether they align with the From domain. Published DNS can pass while the received message fails.
About 40 blocklists, plus forward-confirmed reverse DNS. The domain can be clean and the IP can still be the problem.
Wording, links, and List-Unsubscribe. Filters score the body, not only the envelope.
Microsoft 365, Google Workspace, a sales sequencer, a website form, a billing system. One path in spam is enough.
A Matano IT report at a private URL, with an expiry. Side-by-side by route. Raw headers when they help. Then a written list of what to change, the changes themselves if you want us to do them, and a watch after that so it does not slide back.
We will not grade a forwarded copy of a bounce. Forwarding rewrites SPF and DKIM, so a forward is not evidence.
Any business that sends as its own domain and needs that mail to arrive. Accounting, recruiting, outbound sales, support, password resets, the contact form on the website. If people tell you “I never got it,” this is the page.
You do not have to already know whether DNS is wrong, a vendor is sending on a bad IP, or the body is tripping filters.
No. Not to start. Test messages go to addresses we supply.
No. Forwarding rewrites SPF and DKIM. Send a fresh copy of the same message to the addresses we give you.
That is fine. Independent assessment, then the work, then monitoring. Not a replacement pitch.
No. Checking published DNS is useful and it is a different job. This is how real messages travel, what to fix, and how we keep it from drifting.
We go through the findings with you. You can take the list to whoever already runs mail, or we do the improve and monitor work. Either is a normal outcome.
We reply with the test addresses. No tenant access to start.
Request the auditPrefer to talk first? Email hello@matanoit.com, call 609-782-8324, or book a time.