Every other tool tells you after.
Bakeno watches the six signals that move before a sending domain reaches a blocklist, in the order they move, and never shows an unobserved domain as healthy.
Nodata is not ok.
An SNDS day under 100 messages carries no verdict. A Postmaster domain below the privacy minimum carries no verdict. Both are absence of evidence, and every other tool in this category renders them the same green as a clean day.
Bakeno records them as nodata: not healthy, not faulty, not observed. A nodata reading never opens an incident and never resolves one, because it is not evidence in either direction.
Six sources, in the order they move.
The ones at the top move first. The blocklist comes last; by then the only remedy is replacement.
- Google PostmasterSpam-rate drift, read daily
- Microsoft SNDSFilter-result transitions per sending IP
- MailcowBounce and queue deltas on your own hosts
- DMARCAuthentication-failure trend from aggregate reports
- DNS and PTRSPF, DKIM, DMARC and reverse-DNS drift
- BlocklistsSpamhaus ZEN and DBL, Barracuda: the lagging confirmation
Three bad readings before it opens anything.
A single bad reading is noise. Bakeno opens an incident after three consecutive bad observations and resolves it after three consecutive good ones. A nodata reading advances neither count.
Alerts arrive in Telegram and name the number they used. A 40-mailbox fleet and a 600-mailbox fleet do not share a profile, so the thresholds are set per client.
| Profile | Fleet size | Warn at | Bad readings before an incident | Sampling |
|---|---|---|---|---|
| Starter | up to 150 mailboxes | 0.10% | 3 | daily |
| Core | up to 500 mailboxes | 0.10% | 3 | daily |
| Fleet | up to 1,500 mailboxes | 0.07% | 2 | daily |
At volume the daily aggregate is already smooth, so the threshold tightens and the confirmation count comes down. Waiting for a third day costs a third day.
Running against a real fleet.
291,831 observations recorded across the six sources. Three incidents opened and resolved correctly.
The lead-time number is deliberately absent: it has not been measured yet, and a number nobody measured is the one thing this page will not print.
Start with one domain.
You get the findings whether or not you ever reply.
The audit covers what is visible from outside your infrastructure: SPF including the 10-lookup limit, DKIM, DMARC, MX, reverse DNS, and parked-domain status, all read from public DNS. It cannot see your Postmaster spam rate, your SNDS filter verdict, or your real bounce deltas. Those are the three that move first, and they are the three watched continuously for clients.
Core plan is $400 a month, billed quarterly.
Questions go to hello@bakeno.com.