KeyRotate

KeyRotate is a web app (with optional CLI agent) that automates DKIM key rotation across common email stacks without breaking deliverability. It connects to your DNS provider (Cloudflare, Route 53) and your email sender (SES, SendGrid, Postmark, Microsoft 365) to stage new selectors, validate propagation, and then switch traffic safely. It continuously tests signing on real outbound messages, checks alignment with SPF/DMARC, and alerts when a selector is missing, mis-sized, or being ignored by a provider. The product is not “set and forget”: it gives a rotation calendar, audit logs for compliance, and rollback in one click. This is a traditional app with a small AI assist that explains failures in plain English and suggests exact DNS/provider fixes. Realistically, the hard part is integrations and edge cases; the value is reducing outages and deliverability drops during rotations.