SECURITY

Use MailTested safely

Email diagnostics can expose sender addresses, routing data, server names, and message content. Use a purpose-built test message and protect the resulting report link.

Safe testing checklist

• Never send passwords, API keys, financial data, medical information, or confidential attachments.
• Test only mail systems and messages you own or are authorized to assess.
• Remove personal data before pasting headers into the analyzer.
• Do not publish a report link unless you have reviewed everything it contains.

Search and caching controls

MailTested sends X-Robots-Tag: noindex, nofollow, noarchive on transient reports, raw messages, APIs, and generated result URLs. Private response caching is disabled for report and message views. These measures reduce accidental discovery but do not replace authentication.

Report a security issue

Please use the operator channel on the contact page. Include a clear description and reproduction steps, but do not include unnecessary personal data or exploit other users’ information.

Last updated: August 21, 2026