Hosted TLS-RPT lets you monitor SMTP TLS reporting for your domains directly from the PowerDMARC portal - no manual setup required. Get a clear view of successful and failed email delivery sessions, track encryption compliance, and pinpoint the exact cause of TLS failures, all from a single dashboard with visual breakdowns, CSV/JSON export, and report upload support.
Note: You can configure TLS-RPT for your domains directly on the PowerDMARC portal by heading over to the Hosted MTA-STS page. Learn more about how to set up TLS-RPT in the Hosted MTA-STS Feature Guide.
TLS aggregate reports are available in two viewing formats on the PowerDMARC dashboard: Per Sending Source and Per Result. Navigate to TLS-Reports on the left-hand menu and expand it to reveal both viewing options, plus the Import/Export Reports tab. Click your desired view to select it.
1. Per Sending Source
Selecting Per Sending Source shows all TLS reports grouped by sending source for your selected date range and chosen domain(s). Use the Domain and Date filters at the top of the page to narrow the results.
Summary metrics
The page now opens with three summary cards showing an at-a-glance view of reporting activity for the selected filters:
Total Volume - total number of TLS reporting sessions received
Successful Emails - percentage of sessions delivered successfully
Failed Emails - percentage of sessions that failed delivery
A Show Charts toggle in the top-right corner lets you switch the Results Overview and Top Sending Sources visualizations on or off.
Results Overview and Top Sending Sources charts
With charts enabled, the Results Overview line chart plots successful and failed sessions across the selected date range, and the Top Sending Sources donut chart breaks down report volume by sending source (for example Google Inc., Mimecast, Microsoft Corporation) with the corresponding percentage share for each.
Report Overview table
Below the charts, the Report Overview table lists each sending source along with its report count, delivery results, success rate, published policy breakdown (Enforced / Testing / No Policy), and policy type (MTA-STS / TLSA / No Policy). An Export CSV button at the top-right of the table lets you download the full report overview as a CSV file.
Drilling into a sending source
Cascade (expand) a sending source row to reveal the recipient domains reporting under it, along with the applied MTA-STS policy mode, number of successful and unsuccessful sessions, total emails delivered, and the date range during which the emails were sent.
Expanding a recipient domain further breaks the data down by date, showing the count, number of successful and failed sessions, published policy, and policy type for each day. Each date row includes a Download button under Export JSON so you can retrieve the raw JSON for that day's report.
If a date row contains failed sessions, cascading it further reveals the failure details: sender hostname, source IP, receiver hostname, receiver IP, delivery status, number of failed emails, and the failure reason (for example, an STS policy fetch error).
2. Per Result
Selecting Per Result shows all TLS reports grouped by result - successful vs. failed - for your selected date range and chosen domain(s). Like the Per Sending Source view, this page opens with the Total Volume, Successful Emails, and Failed Emails summary cards, and a Show Charts toggle.
Results Overview and Top Failed Reasons charts
Alongside the Results Overview trend line, this view includes a Top Failed Reasons donut chart that breaks down failures by cause (for example, STS policy fetch errors) so you can quickly identify the most common reasons emails are failing delivery.
Successful and Failed Sessions
Scrolling down reveals the Report Overview section, now split into two clearly labeled, independently paginated tables:
Successful Sessions - sending source, count, published policy, and policy type for all successful deliveries
Failed Sessions - failure reason, count, delivery results, published policy, and policy type for all failed deliveries
Both tables support pagination (with adjustable page size) and can be exported together using the Export CSV button at the top of the section.
3. Import/Export Reports
The Import/Export Reports tab lets you upload raw TLS reports and review previously processed reports, all in one place.
Upload JSON: upload and analyze TLS reports with ease
Click Choose to select a file, or drag and drop it directly into the upload area, then click Upload. Supported formats are JSON, ZIP, and GZ, with a maximum file size of 10MB. The system instantly parses and converts the raw report into a clear, human-readable format. This enables:
Simplified analysis of raw TLS reports without manual decoding
Comprehensive insights into email security and encryption compliance
Faster troubleshooting of email delivery issues with intuitive reports
Note: Make sure the domain has been added to your account before uploading a report for it. If the domain in the report isn't in your list of domains, the report will not be processed.
Uploaded History
The Uploaded History table gives you easy access to past uploads, so you can track, review, and manage previously uploaded TLS reports, including their summary, upload timestamp, filename, and processing progress.
Processed Report Details
A new Processed Report Details table now lists every processed report by recipient domain, showing the count, number of successful and failed sessions, and the report date. Each row includes a Download button under Export JSON to retrieve that report's raw JSON, and an Export CSV button above the table lets you download the full list as a CSV file.
We sincerely hope that this guide has helped you manage and monitor your SMTP TLS reports. If you have any further questions, get in touch with our support team at support@powerdmarc.com, and we will get back to you as soon as possible!