The Problem: Email Infrastructure Is Stuck in 2005

Enterprise email delivery has a dirty secret: the tooling hasn’t meaningfully changed in two decades. The dominant players — Postfix, Exim, legacy PowerMTA installations — are CLI-only, configured through text files, and require senior engineers to manage. There is no dashboard. There is no API. There is no “add a domain and have DNS configured automatically.” Every change is manual, every configuration is fragile, and every mistake is an outage.

Setting up email DNS for a single sending domain takes 30–60 minutes of careful manual work:

1. Log into DNS provider console
2. Create A record for the mail server
3. Create MX records for bounce domain
4. Generate DKIM key, carefully copy the TXT record (one wrong character and signing fails silently)
5. Create SPF record (merge with existing, don’t overwrite)
6. Create DMARC policy
7. Request PTR record (separate process, often separate provider)
8. Wait for propagation
9. Verify everything
10. Discover a typo. Repeat steps 4–9.

Multiply by 50 domains across 10 clients and you’ve burned 250–500 hours of skilled engineering time on what should be automated.

The Engine: KumoMTA

The foundation is KumoMTA — an open-source MTA written in Rust by the original creator of PowerMTA. It’s genuinely exceptional:

• Rust core — memory-safe, no garbage collection pauses
• Async I/O — thousands of concurrent connections per thread
• RocksDB queue engine — crash-safe persistence, not RAM-dependent (Postfix’s high-throughput mode uses RAM-disk, which is not crash-safe)
• Lua-scriptable configuration — dynamic routing and policy, not static config files
• Native Prometheus metrics — built-in observability

Performance: 60M+ messages/hour theoretical, 4–6M messages/hour in typical production — 2–3× what PowerMTA achieves on identical hardware. The bottleneck is rarely KumoMTA. It’s destination rate limits.

But KumoMTA is a component, not a product. It has no multi-tenant isolation. No user management. No DNS automation. No web interface. No IP pool management UI. Configuring it means writing Lua scripts and editing files over SSH.

What We Built On Top

CompleteSender is thousands of lines of Go and TypeScript that turn KumoMTA into the world’s first multi-user, fully isolated MTA. One instance serves unlimited organisations, each with complete isolation — and none of them need to touch a command line.

Organisation → Teams → Users → Senders

The entire platform is built around a hierarchy that maps to how agencies and enterprises actually work:

• Organisation — the top-level entity (an agency, a brand, an ESP)
• Teams — departments or client groups within the org, with isolated data access
• Users — individual accounts with role-based permissions (Admin / User / Member)
• Senders — fully isolated virtual SMTP environments, each with their own domains, DKIM keys (Vault-encrypted), IP pools, rate limits, statistics, suppression lists, and traffic shaping rules

A marketing agency can give each client their own team with isolated senders, and one client’s reputation issues will never touch another’s. An enterprise can separate transactional mail from marketing with different senders, IPs, and policies — all from one dashboard.

DNS Management: Simple Clicks

This is the feature that changes the economics. CompleteSender integrates with nine DNS providers — Cloudflare, AWS Route53, PowerDNS, Vultr, Hetzner, OVH, GoDaddy, Namecheap, and BIND. The workflow:

1. Store your DNS provider credentials (Vault-encrypted)
2. Add a domain in the UI
3. System auto-detects which zones you control
4. All required records created automatically — DKIM, SPF (intelligently merged), DMARC, MX, PTR
5. Automatic verification polling
6. Ongoing monitoring that records remain correct

That’s it. What used to involve a number of technical people across DNS providers, mail servers, and key management is now transparent background operations triggered by simple clicks.

Everything an Agency Needs

• Traffic shaping — three modes: automatic (pre-configured ISP best practices), guided (visual rule builder), or expert (full Lua scripting). Gmail, Microsoft, Yahoo each get optimised connection profiles out of the box.
• IP management with warmup tracking — per-IP warmup day counter, automatic volume ramping, reputation scoring (0–100), blacklist monitoring across Spamhaus, Barracuda, SORBS. Drag-and-drop pool assignment.
• Reputation management — multi-source tracking: major blacklists, ISP feedback, Google Postmaster, Microsoft SNDS. Automatic warmdown on reputation drops. Proactive warnings before problems escalate.
• Real-time queue operations — suspend delivery to a domain, bounce messages, rebind queues, SMTP trace for live debugging, flush for priority delivery. All from the dashboard.
• Monitoring stack included — Prometheus, Grafana, Alertmanager, Netdata. Not an add-on. Not extra licensing. Production-ready from deployment.
• Platform plugins — integrations for every major email marketing platform: Mailwizz, Mautic, Listmonk, Sendy, Acelle Mail, MailPoet, Mailtrain, and more.
• One-click migration — automated migration tools for SendGrid, Mailgun, Amazon SES, PowerMTA, and Postfix. DNS audit, DKIM import, suppression list import, test send, zero-downtime cutover guidance.

Pipeline Coverage

Email delivery has five stages. Most MTAs handle one — stage 4, the delivery engine. CompleteSender handles stages 2 through 5: injection and authentication, queue management, delivery, and bounce/feedback processing. The only stage we don’t handle is composition — that’s your email marketing platform’s job.