Email Authentication, On Your Terms
Sovereign Email Security. Deployed Wherever You Trust It Most.
Quatau gives domain owners full visibility and control over who sends email as them — with reports, alerts, and enforcement tooling on par with the market leaders. The difference: you choose where it runs. EU-sovereign cloud, your own infrastructure, or a mix of both.
Full DMARC, SPF & DKIM Visibility
Every aggregate (RUA) and forensic (RUF) report, parsed out of raw XML and turned into a clear picture of every server sending mail as your domain — authorized or not.
Self-Host the Entire Platform
Prefer to keep everything in-house? Deploy Quatau on your own servers, private cloud, or air-gapped network. Same reporting, same enforcement tooling — your infrastructure, your keys, your audit trail.
A Guided Path to Enforcement
A step-by-step policy wizard walks domains from monitoring (p=none) through quarantine to full reject — flagging legitimate senders you'd otherwise lock out along the way.
Real-Time Spoofing Alerts
Get notified the moment an unrecognized source starts sending mail as your domain, so you catch a spoofing campaign in its first hours, not after customers report it.
Built for Scale: MSPs & Enterprises
Browser-based control panel with OIDC/SSO authentication. Secure, role-based access for distributed teams. Manage everything from anywhere.
US Operated or EU Operated
Choose Quatau Cloud and your data stays on infrastructure owned and operated by a US company, or an EU company processed under GDPR, with no dependency on non-EU cloud providers.