The audit framework covers eight diagnostic chapters where deliverability problems actually live. Each chapter ends with explicit verdict: PASS (operating within healthy thresholds for that dimension), WARNING (drift from healthy thresholds, remediation recommended within 90 days), or FAIL (structural problem requiring remediation before next major campaign). Severity ranking applies across chapters: a Chapter 1 FAIL on authentication is more urgent than a Chapter 7 WARNING on regulatory posture, and the remediation roadmap reflects that hierarchy. We do not use proprietary scoring algorithms or black-box risk numbers. Every measurement, every threshold, every verdict has documented methodology in the audit report. If you want to challenge a verdict, the report shows you the data that produced it and you can independently verify the analysis.
01
CHAPTER 1 · AUTHENTICATION
SPF · DKIM · DMARC alignment
Validation across every sending source (ESP, transactional service, third-party tools, internal applications), alignment verification per RFC 7489 strict interpretation, DMARC progression status from p=none through p=quarantine to p=reject with recommendation, SPF 10-lookup limit audit (silent fail trap that breaks deliverability invisibly).
Tools: mxtoolbox · dmarcian · Microsoft Authentication Portal · dnschecker · custom DMARC report parser · SPF flattening analysis
02
CHAPTER 2 · SENDER REPUTATION
Reputation across major mailbox providers
Independent seed list testing across Gmail, Outlook/Hotmail/Live, Yahoo, Apple iCloud, AOL, plus regional Latin American mailbox providers (Movistar, Claro, Tigo, Telmex). Google Postmaster 90-day historical trend. Microsoft SNDS per-IP reputation scoring. Public blacklist audit across 50+ blocklists. Triangulation across methods to catch measurement artifacts.
Tools: GlockApps · Inbox Insight · Google Postmaster · Microsoft SNDS · Validity Sender Score · Talos Reputation · multirbl.valli.org · custom seed list infrastructure
03
CHAPTER 3 · LIST HYGIENE
List quality, decay, and segmentation
B2B lists decay roughly 28 percent per year through job changes, company acquisitions, domain expirations. The chapter measures yours against the benchmark, segmented by acquisition source (organic signup, lead magnet, purchased list, partner referral). Role-based address audit (info@, sales@, support@ have low engagement and high complaint rates). Hard bounce categorization. Re-engagement candidate identification.
Tools: NeverBounce · ZeroBounce · Kickbox · Hunter.io verification · MailFloss · custom decay analyzer · acquisition source attribution
04
CHAPTER 4 · CONTENT FORENSICS
Subject line, preheader, body template review
Subject line spam-classifier scoring across SpamAssassin, ML-based classifiers, mailbox provider heuristics. Preheader analysis. Body template review for spam trigger patterns (excessive caps, dollar signs, urgency phrases, blacklisted phrases). Image-to-text ratio assessment. Link audit checking destinations against blacklists. HTML structure validation across major email clients.
Tools: SpamAssassin · Litmus · Email on Acid · Mail-Tester · custom content classifier · link scanner against URIBL · Apple Mail Privacy Protection impact analysis
05
CHAPTER 5 · INFRASTRUCTURE ISOLATION
Marketing vs transactional segregation
Subdomain segregation between marketing and transactional flows (mailing.example.com vs mail.example.com or similar). IP pool analysis distinguishing dedicated from shared infrastructure. Return-path domain alignment with sending domain. Custom HELO configuration. PTR/rDNS record verification. TLS/STARTTLS configuration. Subscription to mailbox provider feedback loops.
Tools: dig · whois · ssl-tools · custom subdomain mapper · FBL configuration audit · PTR validation · TLS handshake forensics
06
CHAPTER 6 · MONITORING STACK
Observability gaps and alert calibration
Evaluation of current monitoring stack against the standard set: Google Postmaster, Microsoft SNDS, GlockApps or Inbox Insight, FBL processing pipeline, DMARC aggregate report parsing, blacklist monitoring across major lists, sender reputation tracking via Validity and Talos. Gaps identified per dimension. Alert threshold recommendations calibrated against the post-audit baseline.
Tools: Google Postmaster · Microsoft SNDS · GlockApps · DMARC aggregate parser · custom alert rule builder · Prometheus + Grafana templates if relevant
07
CHAPTER 7 · REGULATORY POSTURE
GDPR, CCPA, Ley 81 jurisdiction
Jurisdiction analysis covering GDPR primary applicability for EU contacts, CCPA for California contacts, Panama Ley 81 if Latin American operations involved, plus consent capture audit across all subscribe forms, third-party lead-gen integrations, partnership data flows. Right-to-erasure workflow validation. Data retention policy alignment with regulatory minimums. We are not lawyers; chapter findings flag patterns for legal review rather than constitute legal opinion.
Tools: consent capture audit checklist · GDPR Article 7 alignment · CCPA Section 1798.100 alignment · Ley 81 Article 27 alignment · DPIA template if applicable
08
CHAPTER 8 · REMEDIATION ROADMAP
Prioritized action plan with effort estimates
Severity-ranked findings list with explicit dependency mapping (fixing finding #7 before finding #3 creates a recurring problem). Engineering effort estimate per item in hours. Expected impact per item in percentage points of inbox placement improvement, deferral rate reduction, or complaint rate reduction. Quick-win items separated from structural items. Quarterly monitoring cadence recommendation. Executive summary suitable for sharing with non-technical leadership.
Deliverable: Git repository with raw data preserved · 24-page written report · executive summary · severity matrix · effort/impact estimation per item · quarterly monitoring recommendations