Read the whole book
Customers, domains, stages, scores and the completeness of each score.
Integrations
OuterMark opens tickets in your PSA, tells your systems when something changes, and answers questions about your book.
Opens a ticket when something changes for a client and adds follow-ups as notes on the same ticket. Can keep the client's invoice line in step with their managed domains. Each ticket number links to the ticket in your own HaloPSA.
Tickets and notes on the board you choose, and an agreement addition kept at the client's managed-domain count. Works with ConnectWise PSA.
The connector is built and switched off. We will say here when it is on.
For any other PSA, register a webhook and route on the event type.
13 kinds of event: a stage change, an alert, a finished scan, an impersonation incident and more. Each delivery is signed. If your endpoint is down we try six times over about eight and a half hours, then switch the endpoint off and show you why. Re-enable it in one click and catch up from the events list.
{
"id": 10482,
"apiVersion": 1,
"type": "domain.stage_changed",
"recordedAt": "2026-09-28T09:00:00Z",
"partner": { "id": 3, "name": "Your company" },
"customer": { "id": 91, "name": "Harbourview Lettings", "status": "active" },
"domain": { "id": 204, "name": "harbourview.example" },
"data": { "from": "identifying_senders", "fromLabel": "Identifying senders", "to": "ready_for_remediation", "toLabel": "Ready for remediation" }
}Customers, domains, stages, scores and the completeness of each score.
A repeat call returns the customer already holding the domain.
No call can change a DMARC policy, start a scan, remove a customer or email anyone. Those happen in the console, by a person.
Keys are made in the partner console, shown once and stored hashed. Each is either read-only or able to add customers, fixed when it is made.
A read-only MCP server lets Claude, ChatGPT, Microsoft Copilot Studio, n8n or Rewst answer questions about your book, on the same keys. It has five tools and all of them read. Report content is treated as untrusted, and every tool only reads, so an assistant cannot change anything through it.
The integration guide is the specification, and partners get it on joining.
Sign-in emails carry your name and come from our address.
They sign in by emailed link or code, a Microsoft work account, or a passkey.
It reads your SPF, DKIM and DMARC records in about 30 seconds, and tells you where you stand today.