TRAFFIC SINCE START
SCANNED
0
DELIVERED
0
TAGGED
0
QUARANTINED
0
REJECTED
0
ESCALATED
0
RECENT SCANS (newest first — click a row for the “why”)
| TIME | VERDICT | FROM | TO | CLASS | SIGNALS | µS |
|---|---|---|---|---|---|---|
| awaiting scan events… | ||||||
HELD MESSAGES
| RECEIVED | FROM | TO | SIZE |
|---|---|---|---|
| quarantine is empty — clean queue | |||
HOSTED DOMAINS (mail is accepted and relayed for these — changes apply instantly)
| DOMAIN | SUBDOMAINS | RETENTION | ADDED |
|---|
ACCOUNTS
| NAME | ROLE | STATUS | CREATED |
|---|
PROTECTED VIPS (display-name impersonation → BEC signal; applies instantly)
| NAME | AUTHORIZED ADDRESSES |
|---|
PROTECTED DOMAINS (look-alike/homoglyph senders → phishing signal)
POST-DELIVERY MAILBOXES (IMAP clawback — on a spam verdict, move the already-delivered original to the user's Junk folder; changes apply instantly)
| ADDRESS | IMAP | JUNK FOLDER | TLS | ANNOTATE | CONTENT-MATCH | STATUS |
|---|
NODE
MAIL FLOW
POST-DELIVERY REMEDIATION (IMAP clawback for shadow/monitor testing)
LEARNING STATE (persisted to disk; survives restart)
DETECTION LAYERS
QUARANTINE RETENTION
Override per domain in the Domains tab, or per address below. A disk-usage cap (node config) deletes the oldest held mail first if the spool grows past its limit, regardless of age.
PER-ADDRESS RETENTION OVERRIDES
| ADDRESS | RETENTION (DAYS) |
|---|
SELF-SERVICE
Signup requires downstream delivery to be configured (verification mail is sent through Bulwark's own delivery agent) and at least one hosted domain. Accounts stay inactive until the emailed link is opened.