The deliverability suite: inbox placement, SPF/DKIM/DMARC, and verdicts you can act on

See whether form emails land in Inbox, Promotions or Spam. Audit SPF, DKIM and DMARC per domain with one-click rechecks and tailored fixes. Verdicts read from real delivered messages, not guesses.


April 27, 2026 · Formitor

“Delivered” and “seen” are different claims. An email can be technically delivered and still sit in a Spam folder nobody checks, which for a lead notification is the same as lost.

Formitor’s deliverability layer treats that as a monitored condition, not a mystery.

Inbox placement

Formitor reads where each tagged test lead actually lands: Inbox, Promotions or Spam. Placement drift is one of the sneakiest failure modes there is, because mail keeps “delivering” while a provider quietly reclassifies it. Now the drift shows up in your dashboard before real leads start getting filtered.

Diagnostics that name the fix

Per sending domain, Formitor checks the authentication records mailbox providers actually judge you on: SPF (present, includes the real senders, under the 10-lookup cap), DKIM (signing, with the published key matching what arrives), and DMARC (a policy that exists and won’t quarantine your own legitimate mail). Each finding comes with a tailored fix, and a one-click recheck confirms your DNS edit immediately instead of waiting for the next scheduled run.

Hard verdicts, not DNS lint

A follow-up release made the verdicts sharper: placement and DKIM checks now read the authentication results from real delivered messages, the actual pass/fail the receiving provider recorded in the message headers. DNS says what should happen; headers say what did. Formitor reports the second one.

Also checked: each form’s notification address itself, catching dead or misconfigured recipient domains, a stupidly common cause of silently lost leads.

Full picture: email deliverability.

Keep reading

Product update · Jul 10, 2026

Connect an AI agent to Formitor over MCP

Generate a read-only token and let Claude or any MCP-capable agent list your sites, ask what's broken right now, pull a site's full status, and read recent alerts.

Read post
Product update · Jul 7, 2026

Hijack forms: live-test any client form straight to your own inbox

Flip on Hijack forms from the admin bar, enter your email, and every notification you trigger while testing goes to you instead of the client. Auto-disables after the window you pick.

Read post
Product update · Jul 1, 2026

A deep security pass across the whole platform

Stricter database access rules with uniform MFA enforcement, hardened request validation on every site-facing check, per-account rate limits, checksum-verified plugin updates, and integrity-pinned dashboard scripts.

Read post
Product update · Jun 12, 2026

Mail Log: search every form test result across every site

A searchable, cross-site view of every check result. Filter by site, form, delivery status or date range, or free-text search by email, subject, error message, or source page. Matching filters in wp-admin too.

Read post
Product update · Jun 5, 2026

Deep browser checks: a real browser fills your form, and you get the screenshot when it fails

Tier-3 deep checks are live for Pro subscribers. A headless browser fills out the form and clicks Submit like a visitor would, catching what server-side checks can't see, with a screenshot of the exact moment it got stuck.

Read post
Product update · Jun 2, 2026

Update the Formitor plugin on your whole fleet from one button

One click pushes the latest plugin to every connected site with a per-site result, sites keep themselves current automatically afterward, and outdated sites are flagged on the dashboard.

Read post

Catch the failure before the client does.

Free plan: 2 sites, every feature, no card. See what it finds.