Basic & Above

MTA-STS Hosting

Enforce TLS encryption for all inbound email. Hosted on our global edge network with automatic certificate management.

What is MTA-STS?

MTA-STS (Mail Transfer Agent Strict Transport Security) is a protocol that enables domain owners to require that inbound email connections use TLS encryption.

Without MTA-STS, email servers use "opportunistic TLS"—they try encryption but fall back to plaintext if it fails. This leaves your email vulnerable to downgrade attacks.

Prevents TLS downgrade attacks
Protects against man-in-the-middle
Required by some compliance frameworks

MTA-STS Policy Example

version: STSv1
mode: enforce
mx: mail.example.com
mx: *.mail.protection.outlook.com
max_age: 604800

This policy tells senders: "Only deliver to these MX hosts, and only over a valid TLS connection."

Fully managed MTA-STS

We handle the hosting, certificates, and DNS configuration. You get enterprise-grade email encryption with zero maintenance.

Global Edge Network

Your MTA-STS policy is served from our worldwide edge network for fast, reliable delivery.

Auto Certificates

SSL certificates are provisioned and renewed automatically. No manual certificate management required.

One-Click Setup

Enable MTA-STS from your dashboard. We generate the policy and provide the DNS records to add.

Policy Modes

Start with "testing" mode to monitor without blocking, then upgrade to "enforce" when ready.

TLS-RPT Integration

Receive reports when senders fail to establish secure connections. Identify issues before they impact delivery.

99.99% Uptime

Enterprise SLA with guaranteed uptime. Your MTA-STS policy is always available when senders need it.

Enforce email encryption today

MTA-STS hosting is included with Basic plans and above.