Everything you need to own your email
Enterprise-grade email routing, domain security monitoring, and privacy-first alias management — without enterprise complexity or pricing.
Email Routing & Forwarding
Sub-millisecond email routing powered by Postfix with materialized lookups. From simple alias forwarding to complex multi-hop routing rules.
Unlimited Aliases
Create as many forwarding aliases as you need. Each one forwards to one or more real addresses with full activity tracking.
Shared Platform Domains
Get started instantly on racmx.fyi, ractermx.fyi, or airgap.vip — no domain purchase or DNS configuration required.
Wildcard Catch-All
One toggle to forward every address on your domain. Give each signup a unique address without pre-creating aliases.
Routing Rules Engine
Conditional routing based on sender patterns, subject keywords, or headers. Priority-ordered with first-match semantics.
SMTP Outbound Relay
Send from any alias with per-alias SMTP credentials. DKIM-signed, SPF-aligned, reputation-monitored.
Blocklist Management
Block by address, domain pattern, or regex. Synced to Rspamd in real time. Import/export CSV. Hit counters per entry.
Domain Security Posture
Continuous automated scanning of your DNS, authentication records, and reputation — with actionable findings and one-click fixes.
DoSPM Security Scoring
0–100 composite score across Identity (SPF/DKIM/DMARC), Shadow Domain detection, and Reputation monitoring. Letter grades A–F.
DNS Drift Detection
Monitors for unexpected DNS changes between scans. Immediate alerts if SPF, DKIM, or DMARC records change without your action.
One-Click Fixes
Missing SPF include? Weak DMARC policy? The platform writes the correct DNS record for you with one button click.
Attack Surface Report
Identifies exposed infrastructure — open relays, subdomain takeover candidates, expired certificates, and shadow DNS entries.
DMARC Alignment Report
Parse RUA/RUF aggregate reports. See which services pass or fail authentication. Know when to tighten your DMARC policy.
MTA-STS & TLS Reports
Enforce encrypted transport. Ingest TLS failure reports from receiving servers. See exactly who can't connect securely.
DNS & Zone Management
Authoritative DNS hosting with auto-provisioning, DNSSEC, versioned zone history, and instant rollback.
Auto-Provisioning
MX, SPF, DKIM, DMARC, CAA, and MTA-STS records generated and maintained automatically. Zero manual DNS editing.
DNSSEC
Automatic key signing, DS record generation, and signature monitoring. Chain of trust from root to your zone.
Zone History & Rollback
Every DNS change versioned with diffs and attribution. One-click rollback to any previous state.
Mail Flow Topology
Visual diagram of your email routing — from sender through MX, filtering, alias resolution, to final delivery.
Privacy by Architecture
Privacy isn't a feature we bolted on — it's how the system is built. Zero-PII logging, cryptographic audit trails, and Icelandic jurisdiction.
Zero-PII Logging
No raw IP addresses stored anywhere. All IPs SHA-256 hashed before persistence. Exceeds GDPR by design.
Cryptographic Audit Chain
Every audit event SHA-256 linked to its predecessor. Tamper-evident blockchain-style chain with nightly integrity verification.
Configurable Retention
Set metadata and content retention independently (7–2555 days). Event-specific overrides. Automated daily purge.
Icelandic Jurisdiction
Hosted in Iceland — strong privacy laws, 100% renewable energy, outside EU mass surveillance directives and US jurisdiction.
Built for Automation
RESTful API, Terraform provider, MCP server for AI agents, scoped keys, and webhooks — integrate RacterMX into any workflow.
REST API (V2)
OpenAPI 3.0 documented. Every platform capability accessible programmatically. Pagination, filtering, and consistent error envelopes.
Terraform Provider
Declarative infrastructure-as-code for domains, aliases, webhooks, and more. One-click export from existing config to .tf files.
MCP Server
npm package exposing RacterMX to AI agents — Claude, Cursor, Kiro. Manage domains and aliases from your coding assistant.
Scoped API Keys
15 discrete scopes, IP allowlisting (up to 20 CIDRs), expiration dates, and rotation support. Least-privilege by default.
Outbound Webhooks
HMAC-signed payloads for delivery, bounce, security, and blocklist events. Retry logic, delivery logs, batch mode.
Bulk Import & Export
CSV/JSON import for domains, aliases, and blocklists. Onboard hundreds of domains in a single operation.
Powerful Yet Simple
Two interface modes, multi-tenant org hierarchy, real-time logs, reports, and white-label branding — all under one roof.
Dual UX Modes
Simple mode for end-users. Powerful IDE-style mode for admins — tabbed panels, keyboard shortcuts, context menus, drag-and-drop.
Organization Hierarchy
Nested orgs with RBAC. Place users at any level for precise visibility scoping. Drag-and-drop domain assignment.
Real-Time Email Logs
Full-text search, domain/status filtering, and WebSocket live-tail. See every message as it arrives — no refresh needed.
On-Demand & Scheduled Reports
Executive Summary, DMARC, Email Statistics, Security Posture — generated instantly or on automated schedules to multiple recipients.
White-Label & Custom Domains
Custom branding, colors, logo, and CNAME access. Your clients see your brand on your domain with automatic SSL.
Consumption Billing
Pay only for what you use — active domains, email volume, DNS queries. No tiers, no per-seat pricing. Zero usage = zero cost.
Ready to take control of your email?
Start with shared domains for free. Add your own domain when you're ready. No credit card required.
Get Started Free