Hosted MTA-STS.
Reinvented.
Publish and maintain a fully compliant MTA-STS policy with zero operational overhead. URIports hosts and manages your policy for you. Just add two CNAME records to your DNS, and we take care of the rest.
MTA-STS without the maintenance overhead
Add two CNAME records. We handle the rest.
Publish an MTA-STS policy by adding two CNAME records to your domain's DNS. URIports will publish an RFC-compliant MTA-STS policy using the latest best practices and periodically validate your policy and email setup.
Why MTA-STS Matters
MTA-STS gives sending servers a reliable way to confirm that your domain normally expects encrypted delivery. When a secure connection suddenly fails, compliant senders can treat it as a warning instead of dropping to plaintext, which reduces the chance of downgrade and interception attacks.
You're in good company









MTA-STS Deployment
The Hard Way vs. The Easy Way
Manual Setup (The Hard Way)
Setting up and maintaining MTA-STS yourself means handling every detail:
- Publishing a DNS TXT record
- Create a MTA-STS policy based on the RFC
- Hosting a policy file over HTTPS
- Managing web certificates and renewals
- Keeping up with RFC and best-practice updates
- Monitoring and adjusting for MX record changes
Hosted MTA-STS by URIports (The Easy Way)
Let URIports take care of everything:
- Simply add two CNAME records to your DNS
URIports publishes and maintains your RFC-compliant policy automatically, and validates your policy and MX setup on an ongoing basis.
URIports is more than MTA-STS alone
It's a full reporting and monitoring tool
With our advanced analytics tool, you can monitor all types of web and mail reports like DMARC, Content Security Policy (CSP), Network Error Logging, and many more.
Privacy by Design
Privacy and data minimization are core design principles at URIports. It's the default, not an afterthought.
Your report data remains your data. We do not sell, share or use it for anything other than providing you with our service.
In compliance with the GDPR and EU law, reports are stripped of any information that might contain personal data.
Get your team on board
Share report data with your colleagues.
Give team members access to your data in URIports and define exactly which domains they can see and whether they can manage filtering rules. Enterprise SSO lets you handle user management through OpenID Connect with providers like Azure AD, OneLogin, and others.
Upgrade your domain's inbound email security in minutes.
No servers, no scripts, no maintenance.
Hosted MTA-STS is part of our Pebble Plus, Stone, Mountain and Himalaya plan.