Skip to main content
parallaxintelligence.digital
Service ■ free checks live now

Got a weird email? Check it on your own machine.

postmortem.report is a set of free checks that run in your browser. Paste the email, get a verdict. Nothing is uploaded, nothing is stored, no account. The email check is mailautopsy, our open-source engine compiled to WebAssembly. Same engine, running on your device.

run a free check mailautopsy on GitHub
01

What you can use today

Five checks, all client side. Open the page, do the check, close the tab. Nothing leaves the browser.

Email safety checkPaste a reported email. You get sender authentication analysis, link and attachment triage, and a sealed report. This is mailautopsy compiled to WebAssembly.
Header readerRaw headers in, a readable path out. Who handed the message to who, and what each hop claimed.
Domain mail checkMX, SPF, DMARC and MTA-STS for any domain, read over DNS over HTTPS. Useful before a client conversation.
Password exposure checkChecks a password against known breach data using k anonymity. The password itself is never transmitted.
Break-glass playbooksShort incident playbooks for the bad morning. What to do first, in order, when an account or a mailbox goes wrong.
The engine, open sourcemailautopsy is a stdlib-only Go library and CLI, MIT licensed, released at v0.1.0 with signed binaries for macOS, Linux and Windows. Read it, run it, or vendor it.

Get mailautopsy

Signed release binaries (cosign keyless), go install, a Docker image build, and a WebAssembly build. It runs offline. github.com/Parallax-Intelligence-Partnership-LLC/mailautopsy

02

Why the answers hold up

Every finding cites evidenceNothing is asserted on vibes. Each finding points at the exact header, link or attachment it came from, so you can check the work yourself.
Deterministic replaySame input, same verdict, forever. Feed the engine the same email next year and it returns the same result byte for byte.
Unknown is a real answerWhen the evidence is thin it says insufficient evidence. It does not fill the gap with a guess.
No vanity scoreThere is no risk number out of 100. A score hides the reasoning. You get findings and the evidence behind them.
It never says safeThe best verdict is that nothing fired. That is not the same as safe, and we will not pretend it is.
Nothing is uploadedThe browser checks run on your device. We do not receive the email, so we cannot lose it.

The first real email through the engine came back “insufficient evidence.” That is the product working: it would rather tell you it does not know than guess on your behalf.

status · free checks live · mailautopsy v0.1.0 public, MIT licensed

03

Who this is for

Small businessesYou got an invoice email that feels off and you need a straight answer in the next two minutes. No login, no sales call, no uploading your mail to a stranger.
IT providersYou support those businesses. You need something you can point a client at, and an engine you can read the source of before you stake your name on its verdict.
04

In build: Mail Posture Watch

Not shipped yet. This is what we are building now, and we would rather say that plainly than sell you a screenshot.

What it will do

  1. Register domains. An IT provider adds the domains they look after.
  2. Re-read daily. SPF, DMARC, MX and MTA-STS get checked every day, not once at onboarding.
  3. Alert on change. When posture weakens or a record moves, you hear about it.
  4. Show the evidence. Before and after, the actual records, so the alert is something you can act on.

Paid, priced per domain. Built for MSPs and IT providers.

status · in build · not available yet

tell me when it ships
visit postmortem.report back to the ledger