Domain health score
TLS-RPT-only posture (MTA-STS deployment, DANE where used, session failure rate, active alerts) over a fixed 30-day window — no DMARC/SPF/DKIM/BIMI input yet.
Failure rate trend
Failed sessions as a share of all sessions per day — rate, not raw count, so a volume spike doesn't read as a failure spike. Hover for the exact figures.
Active alerts
Rule engine evaluated against fixed windows (count over the last day, rate/persistence/corroboration over the last 7 days) — independent of the period selector above, so this always reflects current state. Corroboration by 2+ independent reporters forces severity to urgent regardless of the base tier.
Failures by type
Severity per RFC 8460 §4.3 result type, escalated to urgent when the same policy also reports dane-required (own triage model — see README).