Features
Everything Nocturnal Post does.
Every capability below is shipped and running on the hosted service today — and available to self-host under AGPL-3.0. What's coming next is at the bottom.
Connect your team
Microsoft 365 sign-in
Sign in with Entra ID. Your tenant is created from your email domain — the first person from your company becomes the admin, teammates join automatically. Tokens encrypted at rest; disconnect revokes tokens server-side (RFC 7009).
Google sign-in
Same domain-based pattern: gmail.com users get a one-of-one workspace each, Gsuite domains share the company tenant — no special-casing between the two. Email-verified accounts only.
Graph + IMAP mail ingest
Microsoft Graph delta queries (only new/changed mail transfers) for Outlook, plus IMAP with OAuth (XOAUTH2) for Gmail and standard servers — normalized into one pipeline. Sending from Gmail mailboxes uses SMTP + XOAUTH2.
IMAP with app passwords
No OAuth? No problem. Any standard IMAP server — Fastmail, Zoho, self-hosted Dovecot, your own mail host — connects with an app password in under a minute: address, password, host (auto-detected for known providers). The credential is verified live before it's stored and encrypted with a key derived per-tenant. Everything else — briefings, items, intelligence — works identically.
Per-user mailbox isolation
Mailboxes are personal: members control only their own folders and syncs. Tenant admins have the fleet view; the Team page is admin-only. Cross-tenant isolation enforced at every layer and test-proven.
Account lifecycle you can see
Every mailbox carries an explicit state — connected, initial sync, active, degraded, reauth-required, disabled — enforced by a state machine, not scattered flags. When an OAuth grant expires or a password changes, the account lands in reauth required with a plain-language explanation of what happens next, instead of silently failing.
Automatic understanding
Classification → work items
Every inbound message is classified on arrival: urgent, follow-up, needs-response, internal, external, automated. Actionable mail becomes a tracked work item you can assign to teammates; automated mail never creates noise.
Topic classification with confidence
A second dimension on every message: semantic topics
(Finance, Compliance/Legal, HR/People, Projects/Work,
Security/Alerts and more) scored with a real confidence
percentage — batched, one API call per sync batch. Each
tenant teaches the classifier its own vocabulary:
custom topics, org hints, and first-match sender rules
("billing@ = Finance, 95%"). Briefings show a topic
breakdown; notifications can key on
topic:Finance.
Header analysis (Authentication-Results)
SPF/DKIM/DMARC verdicts are parsed and stored on every message — the receiving platform already computed them; we read and report them. Failures become security flags.
Impersonation & BEC detection
Lookalike sender scoring (TLD swaps, Cyrillic confusables, one-character typos) against your domain and watched client domains — plus executive-impersonation, financial-urgency and gift-card/crypto heuristics. High-confidence matches open work items automatically.
Calendar sync
Your Microsoft 365 calendar is read alongside mail (best-effort — calendar issues never delay mail). The morning brief opens with today's schedule: times in your timezone, locations, online-meeting markers, attendee counts. Your day's shape before any inbox noise.
Semantic search (optional AI)
Embeddings over subject + sender + preview, stored per-tenant and purged with the same retention window. Search your mail by meaning. Works with OpenAI, Azure or LM Studio — off by default, zero required dependencies.
Briefings & delivery
Dawn, Dusk & Moon briefings
Twice-daily summaries by email and Teams post, plus a Saturday full-week wrap-up and upcoming-week preview. The Dawn Brief opens with today's calendar, then a topic breakdown of the morning's mail; the Dusk Brief filters out newsletter noise but keeps anything actionable. Per-tenant timezone and times, editable without a restart. Test any briefing with one click — nothing waits until tomorrow.
Lantern rules — instant alerts
Schedule briefings are one half; rules fire the moment matching mail arrives: category, sender-domain or keyword conditions → email or Teams actions. Full Teams channel config from a pasted URL.
Mail Security section
The Dawn Brief reports flagged mail: failed authentication, impersonation attempts, BEC suspects — what the system caught, in plain language, every morning.
Outbound with retry
Every queued send is tracked with status and errors. Failed deliveries retry from the UI; per-user attribution keeps each member's sends private. Delivery rides the Nightchute boundary — a provider seam that already speaks email, Microsoft Teams, Google Chat, and Slack, with push pluggable without changing a line of briefing code.
Trust & operations
Vault — retention you control
Email-derived data ages out on your schedule, hourly — and the policy is enforceable, not descriptive: message rows, cached bodies, AI summaries, search embeddings (expired and orphaned), and source text quoted in work items all purge together. A "7-day" promise means 7 days, provably: every purge writes an auditable record — counts and window only, never the content.
Purge history, auditable
The Retention page shows what was purged, per resource, under which policy window, and whether it succeeded — a compliance trail your auditor can read without a database.
Admin control tower
Fleet dashboard: tenants, seats, sync health, briefing delivery rates, security flags, DMARC failures — plus per-tenant CSV reports for compliance reporting.
Hardened multi-tenant boundary
Tenant data lives in per-tenant databases behind validated accessors: path traversal refused, unknown tenants rejected loudly, and a systematic cross-tenant probe suite attacks every object endpoint (items, folders, rules, channels, outbound) asserting one tenant's session can never touch another's objects.
Data export & audit trail
One-click tenant JSON export (never tokens or bodies), full audit log of admin actions, and a complete disconnect flow that revokes tokens and stops syncing.
Ownership that follows payment
Tenants start unclaimed — teams share the workspace free during beta. The first paying user takes management; pricing tapers as you grow: $10, +$5, +$2 per user. Ownership transfers if an owner leaves.
Intel Hub — your relationship & security picture
The briefings stay short; the depth lives in your
Intel Hub: a CRM built from your actual mail flow
(who's a client, a vendor, a machine — and who's gone
quiet too long), an email-security rollup of what got
flagged in your inbound and why, and DMARC
aggregate reports for your own domains — point
your domain's rua= at
rua@nocturnalpost.com and see exactly which
providers pass and fail your policy, per day.
On the roadmap
Domain health reports
Beyond DMARC aggregates: proactive SPF record analysis (lookup-count warnings before you hit the limit), DMARC policy advice as you tighten enforcement, and DKIM record validation — the "what should I fix" companion to the aggregate reports.
PII Guardian & breach monitoring
Detect sensitive data in previews (with optional redaction), credential-breach awareness for your domain, and data-broker opt-out tracking as managed work items.
Opt-out automation
Turn broker emails into tracked opt-out requests with completion follow-up — the Incogni-style workflow, built on the work-item engine.
Ready in minutes — OAuth or plain IMAP
Sign up with Microsoft Sign up with Google