Protect
Attack surface
Email & DNS authentication
SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DNSSEC, and CAA posture per root domain. Covers both email-auth and DNS hygiene (DNSSEC + CAA). Weak posture = brand-impersonation tax.