SMTP transport security was not tested
Updated
What this check looks for
We could not test your mail servers' encryption on this scan. Nothing below was measured — this is a gap in our result, not a finding about your mail.
Why it matters
Reporting nothing is honest; reporting a pass we did not earn would not be. Treat SMTP TLS as unknown for this scan rather than as working.
What it costs your score
This check never deducts. It reports a fact — or reports that something could not be verified — and is shown on the report without moving the score.
- Severity
- info
- Default confidence
- confirmed
- Status when triggered
- info
- Deduction
- 0 points
- Family cap
- none
- Category
- Email transport
- Module
- Email smtp tls
- Fix owned by
- third party
- In the ruleset since
- 2026.09
Technical detail
‹reason›
Checking STARTTLS means opening a real mail connection to port 25 of each of your mail servers and beginning the conversation a sending server would. This scan could not open one, so nothing below was observed.
Mail servers not tested: ‹mx hosts›.
Nothing here is a pass. A server that offers no encryption at all, or offers it with an expired certificate, looks exactly like this section does — which is why it says "not tested" rather than showing nothing. Run the scan again; if it keeps saying this, the shortfall is ours and not your mail servers’.
Standards and references
Test this on your domain
Run the check that produces this finding, on its own, against any domain.