BULWARKEMAIL SECURITY GATEWAY
BULWARK // CONSOLE
UPTIME
TRAFFIC SINCE START
SCANNED
0
DELIVERED
0
TAGGED
0
QUARANTINED
0
REJECTED
0
ESCALATED
0
RECENT SCANS (newest first — click a row for the “why”)
TIMEVERDICTFROMTOCLASSSIGNALSµS
awaiting scan events…
HELD MESSAGES
RECEIVEDFROMTOSIZE
quarantine is empty — clean queue
HOSTED DOMAINS (mail is accepted and relayed for these — changes apply instantly)
DOMAINSUBDOMAINSRETENTIONADDED
ACCOUNTS
EMAILNAMEROLESTATUSCREATED
PROTECTED VIPS (display-name impersonation → BEC signal; applies instantly)
NAMEAUTHORIZED ADDRESSES
PROTECTED DOMAINS (look-alike/homoglyph senders → phishing signal)
POST-DELIVERY MAILBOXES (IMAP clawback — on a spam verdict, move the already-delivered original to the user's Junk folder; changes apply instantly)
ADDRESSIMAPJUNK FOLDERTLSANNOTATECONTENT-MATCHSTATUS
NODE
MAIL FLOW
POST-DELIVERY REMEDIATION (IMAP clawback for shadow/monitor testing)
LEARNING STATE (persisted to disk; survives restart)
DETECTION LAYERS
QUARANTINE RETENTION

Override per domain in the Domains tab, or per address below. A disk-usage cap (node config) deletes the oldest held mail first if the spool grows past its limit, regardless of age.

PER-ADDRESS RETENTION OVERRIDES
ADDRESSRETENTION (DAYS)
SELF-SERVICE

Signup requires downstream delivery to be configured (verification mail is sent through Bulwark's own delivery agent) and at least one hosted domain. Accounts stay inactive until the emailed link is opened.