SMTPForensics

SMTPForensics is a web app (with optional lightweight desktop agent) that ingests SMTP logs, DSNs/bounce messages, and MTA events from Postfix/Exim/Exchange/SES/SendGrid and turns them into a single, searchable incident timeline. It normalizes cryptic status codes, correlates retries across queues, and highlights the real root cause: DNS/auth failures (SPF/DKIM/DMARC), TLS negotiation issues, rate limits, blocklist hits, greylisting, or recipient-side policy rejects. The product focuses on “what changed” detection (new IP, new hostname, new header, new auth result) and provides concrete, step-by-step remediation checklists per provider. It’s not a full SMTP server replacement; it’s a diagnostics and triage layer that sits on top of what teams already run. An AI-assisted explainer summarizes incidents, but the core value is deterministic parsing and correlation so engineers can trust it.