Made & hosted in Germany

Souvera Shield

Mail security for users. Reputation for admins.

Souvera Shield protects every inbox with upstream spam and virus filtering – and gives users control over their own quarantine. Administrators additionally get professional reputation management for their own domain.

  • Personal quarantine per user
  • Reputation score & incidents
  • 9 deliverability checks

For end users

Spam control belongs in the user's hands

No waiting for IT: every user manages their own quarantine and their own lists – directly in the workspace.

Overview dashboard

Five counters at a glance: quarantine, whitelist, blacklist plus withheld attachments and viruses – and the new arrivals of the last 24 hours.

Spam quarantine

Review withheld mails via preview (including headers), release or delete – individually or in bulk, with full-text search and CSV export.

File & virus quarantine

View content blocked by the content filter or virus scanner and release it in a controlled manner – if enabled by the administrator.

Personal whitelist

Permanently allow trusted senders or entire domains – every user maintains their own list.

Personal blacklist

Permanently block unwanted senders – without a ticket to IT.

Notifications

Alerts for new quarantine mails, optional daily summary, dashboard widget and results in the unified search.

In focus · For administrators

Reputation management: so your mails arrive

The best email is useless if it lands in the recipient's spam folder. Souvera Shield continuously monitors your domain's delivery reputation – fully integrated, across six dedicated views and without external tools.

All values are based on real measurements – nothing is estimated or simulated.

Reputation score (0–100)

A daily recalculated total score condenses your mail reputation into a single number. Daily snapshots make the trend traceable over 7, 30 or 90 days.

Per-provider reputation

Separate analysis for Google (Gmail), Microsoft (Outlook & Office 365), Yahoo and GMX/Web.de – with volume, DKIM/SPF pass rates and an overall verdict per provider.

Deliverability checks

Automatic and on demand: SPF, DMARC, MTA-STS, TLS-RPT, PTR/HELO, TLS encryption, BIMI, One-Click-Unsubscribe and DNS blacklists. Every warning explains in plain language what to do.

Sending source analysis

All servers that send in your domain's name are extracted from DMARC reports and classified: legitimate, unknown or potentially abusive – so spoofing shows up early.

Incident management

If the daily analysis detects a problem – blacklist entry, dropping pass rates, failed mail test – an incident is created automatically with cause, history and status. Deduplication included.

Real-world mail tests

Every Sunday and any time manually: a test message is sent authenticated through your own mail server and analyzed externally – results reflect your true server reputation.

How your reputation score is composed

Transparently weighted across five real data sources. Components without a sufficient data basis are shown as such and excluded from the calculation.

30%

DMARC analysis

DKIM/SPF pass rates from aggregate reports of the major providers.

25%

Mail-test results

Results of the weekly reputation mail tests via your own server.

20%

Blacklist status

Presence of the sending IP on common DNS blacklists.

15%

Infrastructure

SPF, DMARC policy, MTA-STS, TLS-RPT, PTR/HELO, TLS, BIMI and more.

10%

Incidents

Open reputation incidents with a direct effect on the score.

Provider-specific analysis for

Google
Gmail
Microsoft
Outlook & Office 365
Yahoo
Yahoo Mail
GMX
GMX & Web.de

0–100

Daily score

5

Weighted data sources

9

Deliverability checks

1×/week

Automated mail test

Analysis runs daily in the background – can be triggered manually at any time.

Deliverability checks in detail

Nine active checks. One clear picture.

Souvera Shield continuously verifies your domain's entire sending infrastructure. Every warning delivers plain-language explanations and concrete recommendations – the outgoing IP is determined automatically from mail tests, Stalwart host or MX record.

Check 01

SPF record

Syntax check and control of the 10-lookup limit – an overly long SPF record is a common, often overlooked deliverability blocker.

Check 02

DMARC policy

Verification of the active policy (none / quarantine / reject) including correctly configured reporting addresses.

Check 03

MTA-STS

Prevents downgrade attacks on your mail delivery – the policy document and enforcement mode are checked.

Check 04

TLS-RPT

Receives reports about failed TLS connections and surfaces problems in encrypted delivery.

Check 05

PTR & HELO

Reverse-DNS and HELO value of the sending IP – large providers treat inconsistent values as a clear spam signal.

Check 06

TLS encryption

Active check of the server certificate and the negotiated TLS versions for inbound and outbound connections.

Check 07

BIMI

Brand logo in the inbox: verification of the VMC certificate and DNS records – a visible trust signal for recipients.

Check 08

One-Click-Unsubscribe

RFC 8058: mandatory at Google and Yahoo since 2024 for bulk senders – Souvera Shield checks both header and endpoint.

Check 09

DNS blacklist

Match of the sending IP against common public blacklists – daily checks and immediate alerting on new listings.

How is your domain's reputation doing? Talk to us.

How it works

An email's journey through Souvera Shield

1

Arrival

Every incoming mail first passes the upstream security layer – before it ever reaches your mailbox.

2

Inspection

Spam scoring, virus scanning and content filtering analyze the message and its attachments.

3

Quarantine

Suspicious messages are withheld – the recipient is notified.

4

Your decision

Release, delete or permanently allow/block the sender – the control lies with the user.

Control & compliance

Traceable down to the detail

Shield is built for enterprise use: with a clean permission model and complete logging.

Audit log

Every release, deletion and list change is logged chronologically – exportable for compliance purposes.

Central settings

Enable file and virus quarantine per instance, control notifications and spam thresholds centrally.

Role-based permissions

End-user functions and reputation management are cleanly separated via groups – technically enforced on every endpoint.

Encrypted credentials

All connection data is stored encrypted; central API tokens are managed by the credentials hub in Souvera Central.

Security you can understand.

See Shield and the reputation management live in action.

Request a demo
Host-OnHost-On Development Preview