Craft CMS vs Mailtrap

The platform spans the whole email lifecycle: Mailtrap Local for the development loop, the hosted sandbox for testing, sending, Inbound for receiving, and Automated Domain Reputation Monitoring watching the result. Recent work had turned to trust and abuse controls — a recipient-domain allowlist so stolen credentials cannot send outside it, and DNS-TXT verification of additional company domains that touches neither SPF nor DKIM and grants no sending rights. Device Previews now adds something different: rendering a captured message across more than 100 real client and device configurations, one screenshot each, light and dark modes compared side by side.

Two lines of work are running at once. The trust controls answer the problem of being a sending platform at scale — telling legitimate multi-brand senders from abusive ones — and both currently run through support requests rather than self-serve settings. Device Previews points the other way, at capability the platform did not have: cross-client rendering QA is normally bought from a separate vendor, and folding it into the sandbox removes both the export step and the second subscription. The gap-closing phase is evidently not over.

The manual trust flows are the obvious next thing to move into the dashboard and API, since every other capability here is self-serve. Whether Device Previews grows an API of its own — the natural ask for anyone wanting render checks in CI — is not indicated by these entries.