No card required.Create an account later to keep your settings.
ProtectionRulesLogsSettings
Threat intelligence feeds
Blocks senders and links seen in active campaigns.
Block lookalike domains
Addresses posing as someone you know.
Newly registered domains
Domains younger than 30 days are often built for an attack.
Security
Catch phishing in the first second.
Every message is checked against dozens of signals before delivery: newly registered domains, lookalike addresses, redirect chains and password-protected attachments.
Threat lists refresh every minute, so an attack that started this morning is already on the list.
Lookalike domains
Malicious links
Reply-chain hijack
QR phishing
Invoice fraud
New senders
Locked archives
paypa1-billing.coblocked
docs-share.link/a8fblocked
invoice@vendor-pay.netheld
login-micros0ft.appblocked
track.mailpix.iostripped
qr.secure-verify.topblocked
hr-updates.example.orgheld
pixel.opens.newsstripped
wallet-sync.clickblocked
dropbox-files.cfdblocked
beacon.adtrk.netstripped
bank-notice.supportblocked
paypa1-billing.coblocked
docs-share.link/a8fblocked
invoice@vendor-pay.netheld
login-micros0ft.appblocked
track.mailpix.iostripped
qr.secure-verify.topblocked
hr-updates.example.orgheld
pixel.opens.newsstripped
wallet-sync.clickblocked
dropbox-files.cfdblocked
beacon.adtrk.netstripped
bank-notice.supportblocked
Privacy
Opening an email no longer reports back.
Tracking pixels are removed, images load through a proxy and tracking parameters are stripped from links. Senders can't tell when or where you read.
Every protection is a single switch. Turn it on — that's it.
Privacy
Changes are saved instantly.
Strip tracking pixels
Removes 1×1 images and open beacons.
Proxy remote images
Hides your IP address and location.
Clean links
Removes utm parameters and click IDs.
Messages checked / day48M
Median check time38 ms
Phishing caught99.4%
Mailboxes protected310K
Setup
Three minutes. Nothing to install.
Add your addressKestrel creates a private forwarding address.
Turn on forwardingOne setting in your current mail provider — we show you where.
Choose your switchesThe defaults suit most people.
Verify your domainAdd a single TXT record.
Point MX to KestrelMail is delivered to your current server after inspection.
Set team policiesShared rules, per-person exceptions.
# Score a message before deliverycurl https://api.kestrel.example/v1/score \
-H "Authorization: Bearer $KESTREL_KEY" \
-d '{"from":"billing@vendor-pay.net","links":3}'# → {"verdict":"quarantine","signals":["new_domain","lookalike"]}