doorcheck
Integrations

Plugs straight into
your stack.

Mail in, verdicts out. Doorcheck connects through provider APIs — no MX changes — and exports everything it does to the tools your team already uses.

5
mail platforms protected — cloud and on-premise
0
MX changes — we're never in your delivery path
<15
minutes from OAuth consent to live protection
100%
of verdicts and actions exportable to your SIEM

How the pieces connect

Doorcheck reads mail through each platform's own API, scores it, and pushes verdicts everywhere your team looks — while delivery keeps flowing through your existing path.

YOUR MAILMicrosoft 365Google WorkspaceExchange on-premcPanel fleetsIMAPdelivery path unchangedprovider APIDoorcheckscores · quarantines · learnsQuarantine + consolerecall, release, auditSlack / Teams / digestsalerts + per-mailbox reportsSIEM / SOAR / APIevery verdict & action, structured

Roll out at your own pace

Connecting doesn't mean committing. Doorcheck starts in monitor mode — verdicts visible, mail untouched — and you enable enforcement per tenant when the results have earned it.

STEP 1 — CONNECT
OAuth or API in
Consent to scoped permissions or point Doorcheck at your server. No MX changes — if you disconnect tomorrow, nothing about your mail flow has to be undone.
STEP 2 — MONITOR
Watch the verdicts
Doorcheck scores everything and shows what it would have quarantined — on your real traffic, with zero user impact. Compare it against what your current filter missed.
STEP 3 — ENFORCE
Turn on remediation
Flip enforcement on per tenant or policy. Threats now recall to quarantine automatically, every mailbox gets its blocked-mail report, and every action stays reversible.

Mail platforms

Where Doorcheck reads, scores, and remediates mail — via the provider’s own API, never as a relay.

Microsoft 365
OAuth in with admin-consented Graph scopes. Live in minutes — no MX changes.
Google Workspace
Connect via Google’s APIs under the Limited Use policy. No mail-flow surgery.
Exchange on-premise
On-prem fleets get the same behavioral AI as the cloud suites.
cPanel
Protect hosting-provider mailbox fleets at scale — built by people who run them.
IMAP
Any standards-compliant mailbox can be scored and protected.

Alerts & collaboration

Verdicts and incidents, delivered where your team already lives.

Slack
Real-time detections, campaign alerts, and daily digests in your channels.
Microsoft Teams
Incident notifications via incoming webhooks.
Email digests
Per-mailbox quarantine digests and operator summaries.

SIEM, SOC & automation

Every verdict, purge, and audit event — exportable to the tooling you already run.

Splunk
Stream verdicts and audit events over HTTP Event Collector.
Microsoft Sentinel
Forward events for correlation via webhook / API ingestion.
Elastic
Ship structured JSON events straight into your indices.
Any SIEM / SOAR
Structured webhooks and syslog-style export work with whatever you run.
REST API
Query verdicts, trigger purges, manage policies — everything the console does.

Identity & access

Console sign-in that fits your identity stack.

SSO (OIDC / SAML)
Sign in through Microsoft Entra ID, Okta, Google, or any standards-based IdP.
Multi-tenant RBAC
Per-tenant roles and isolation — built for MSPs from day one.

Don't see yours? The REST API and structured webhooks make most integrations an afternoon of work — tell us what you need atsales@doorcheck.io.

Don't trust the email. Check it.

Connect your existing mail in minutes — no MX changes, sovereign self-hosted option, free during beta.

Get early access