Clear answers before you start.

No. The audit evaluates only publicly accessible DNS resource records and standard mail protocol configurations (like SPF, DKIM, DMARC, MTA-STS, DNSSEC, and MX) that any mail server on the internet already inspects when delivering an email to your organization.

We never access your mailboxes, credentials, or private message content, and no software or agents are installed. While DNS and mail protocol records are inherently public by design, we do not index domain results in a public directory or broadcast who ran an audit, and any personal details you submit are protected under EU GDPR.

Standard cloud suites provide baseline spam filters and mailbox storage, but their filtering can operate as an opaque black box. Because large vendors rely on broad, one-size-fits-all rules across millions of generic accounts, administrators often have little visibility into why a decision was made either way when an email is delivered, quarantined, or filtered.

Cirrus Invicta is designed to adapt to the unique workflows, trusted contacts, and communication patterns of your specific business. We pair transparent inbound threat protection, giving your team clear insight into filtering decisions, with active outbound governance so your domain cannot be spoofed by attackers.

Onboarding is tailored to your needs and the services you choose to enable.

We take a phased approach, starting with an understanding of your existing email environment and requirements. Where applicable, this includes discovering legitimate sending services and assessing your current security configuration before introducing enforcement policies.

Whether you're enabling email security monitoring, DMARC management, or additional protection services, we'll guide you through the relevant setup steps, helping minimise disruption and ensuring changes are introduced in a controlled manner.