Hey t= here =F0=9F=91=8B,

Latel= y we've been working on giving you more control over who can get into your = account and where your sends come from. Two-factor authentication is now av= ailable on every plan, including free, and IP Allowlisting lets you decide = which IP ranges can send through the API. We also made webhooks easier to t= rust.

In our= customer spotlight, Mart=C3=ADn from Evently shares how a small team sends= hundreds of thousands of ticketing emails for events across LATAM. Let's g= et into it.

Shipped

Restrict API sending to trusted IPs with IP Allowlisting

IP Al= lowlisting is a new security setting that adds a layer of protection for AP= I sending. You define up to 10 IPv4 CIDR ranges that are allowed to send th= rough the Postmark API, and requests from anywhere else are rejected with a= 403.

You c= an set it at the account level or for an individual Server. If a Server has= its own allowlist, it overrides the account setting for that Server.

A few = things to know before you turn it on:

• It protects API sends. SMTP isn't checked = against your ranges.
• It's configured in the UI by design, which= keeps allowlist changes out of the API.
• It controls who can send email through your accoun= t. It isn't a replacement for a firewall or WAF.

Read the blog post

2FA is now available on the free Developer plan

Your = free account can still hold live API tokens and real sending history, so it= deserves the same login protection as a paid one. You can now turn on two-= factor authentication on any Postmark plan.

On th= e free Developer plan, app authentication is the available method. SMS auth= entication remains a Basic-and-above feature, and existing SMS setups keep = working as they do today. Turn it on from Profile =E2=86=92 Securit= y, and save your backup codes somewhere you can reach without your= phone.

Learn how to set up 2FA

Webhooks now verify themselves (and tell you when something= 's wrong)

Webho= oks are how your systems find out what's happening to your email, so a sile= nt failure leaves you flying blind. We made them something you can verify, = watch, and trust:

• Verification. When you cr= eate or edit a webhook, Postmark tests your endpoint for every event type y= ou've selected and checks for a 200 response. If one fails, you'll see whic= h one and why.
• Statistics. A new endpoin= t, GET /webhooks/{id}/statistics, returns a rolling 24-h= our view of requests, success and failure counts, retries, success rate, an= d average response times.
• Heads-up emails. If an endpoint s= tarts failing or slowing down, we email the account owner. You don't need t= o set anything up.

This = applies to outbound webhooks (delivery, bounce, open, click, spam complaint= , and subscription events). Inbound webhooks run on separate infrastructure= and aren't affected.

Prefe= r to see it in action? Greg walks you through how to configure, verify, and= handle Postmark webhooks in your application, so you get real-time insight= into your email events. He covers the dashboard, the MCP server, and the A= PI. Watch the video

Read the update

See all product updates

Customer spotlight

This = month we're featuring Mart=C3=ADn Moreno Cerda, a software engineer at Evently. His small team is building an all-in-one platform f= or event producers across LATAM, and a lot of what they do depends on email= landing when it should. Here's how he thinks about it.

How would you describe yourself in one sentence?

A sof= tware engineer who enjoys building things, solving problems, and always has= a new idea to explore

Can you tell us a little bit about your experience and the work= you do?

Softw= are Engineer at Evently. Part of a small team building an all-in-one platfo= rm that helps event producers across LATAM manage their entire operation=E2= =80=94from ticket sales, payments, and POS to access control, marketing, dr= inks, merchandise, lockers, and back-office. Every process is designed to b= e highly automated, allowing us to serve thousands of event organizers with= a lean team.

How has Postmark helped you?

1) Gr= eat deliverability, 2) easy to maintain templates with the MCP and 3) Great= DX and UX

How are you using Postmark on your projects today?

We se= nd hundreds of thousands of emails to our customers who register and purcha= se tickets and products at our events.

What advice would you give other folks in your role about imple= menting and managing their email?

Prote= ct your reputation from the beginning as if it were your own child

Built something cool with Postmark lately?
We'd love to feature you in our Customer Spotlight!

Our latest, greatest fin= ds from around the web

Here = are three things that caught our attention this month:

Parakeet redux

Moond= ream squeezed NVIDIA's Parakeet speech recognition model down to a ternary = version, with every encoder weight set to -1, 0, or +1. It comes in at 178 = MB, runs on CPUs and Apple silicon, and beats the original on the 25-langua= ge FLEURS benchmark and on long-form audio. Check out the mo= del

Claude Frontier Academy

Anthr= opic is investing $100M to train 10,000 engineers by the end of 2027 to lea= d AI work inside organizations. First credentials are expected in early 202= 7. Read the announcement

Introducing Strands Decider

A sma= ll open-source model (2B parameters) that doesn't generate text. It picks f= rom fixed options and reports how confident it is, which makes it a fast ch= eck before an agent calls a tool. Read the post

Meme of the month

Newsletter complete. See you next month!

Keep building amazing things,

The Postmark Team

P.S. Take two minutes today to turn on 2FA (Profile =E2=86=92= Security) and save your backup codes somewhere you can reach with= out your phone. Future you will be glad you did.