How investigations work

An investigation tracks one authentication question through its fix and its verification. For example: an unfamiliar service is sending as your domain, or a service you use is failing DKIM.

What you see

Each investigation says what is known, what is still uncertain, and what it is waiting for: your confirmation, an approval, a DNS change you publish, or new reports. Pending investigations are open; resolved ones keep their outcome and history.

What you do

Usually one thing: answer the question it asks, such as whether you use a service, then review the suggested fix. Any DNS change is reviewed and approved separately.

On each plan

Every plan shows the investigations MailGlo opens for you, such as a report conflict, a DNS problem, an SPF flattening failure or a new sender, and you resolve or dismiss them on any plan. Alerts reach you on every plan.

Paid plans add investigation work: opening an investigation yourself, assigning it, asking a client or teammate for information, evidence packets and automated investigation runs. The page shows the plan's choices where these start.

Where they appear

To do lists everything waiting on a person, most urgent first, investigations included; All investigations there lists every investigation for all your domains. In the API they are called cases.