Open-source
Our Projects
Open-source sites and tools from the Forward Email team, built alongside our email service.
Privacy Ratings
Rates email providers, VPNs, browsers, password managers and more against public privacy criteria. Each positive answer links to evidence you can check, and scheduled scans test the security of each hosted service.
Why we built it
Most privacy lists depend on a few volunteers and publish no rules for what gets in. Forward Email backs this one as a business, and its own rating follows the same public criteria as every other entry.
Spam Scanner
A spam filter for Node.js, the command line and mail servers such as Postfix. It catches spam, phishing, scams and malware in any language and explains each decision it makes.
Why we built it
Forward Email keeps no logs of message content, so we could not hand mail to an outside filtering service. We built a filter that runs on our own servers and explains its decisions without anyone reading the mail.
Attestium
A Node.js library for remote attestation. It collects evidence of the code a server runs and checks it against public references such as commits, signed releases and pinned packages.
Why we built it
Our code is open source, and Attestium lets you check that our production servers run that same code. We publish the results through Audit Status on our status page.
Terminal Email
A directory of email clients that run in a terminal on Linux, macOS, Windows, BSD and Android, with install commands, supported features and a working configuration for each one.
Why we built it
Forward Email has its own terminal app, which the directory features. Every other client gets the same facts, a Forward Email configuration, and works with any email provider.
Alumni Email
A guide for universities on giving graduates a lifetime address on the school domain, forwarded to the inbox each graduate already uses.
Why we built it
Universities already run alumni forwarding on Forward Email. The guide walks IT teams through the setup, the costs and our case study before they make the same move.
Time to Inbox
A guide to time to inbox (TTI): how long an email takes to reach the inbox, how to measure it and what slows delivery down.
Why we built it
Forward Email measures its own time to inbox and publishes the results live. The guide explains the method behind those numbers, so you can test any provider the same way.
Server Auditing
A free Bash script that runs a Lynis security audit on a Linux server, checks failed SSH logins, open ports and disk use, and emails you the report.
Why we built it
The script sends its report over SMTP, through Forward Email by default, so you can review each server from your inbox instead of logging in to it.
SSH Monitor
A free Bash script that counts failed SSH logins in your auth log or journal and emails you when they pass a threshold.
Why we built it
The script sends its alerts with one request to the Forward Email API, a simple way to send email from a cron job on any server.
SSL Monitor
A free Bash script that checks your SSL/TLS certificates each day and emails you before any of them expire.
Why we built it
The script emails its report through the Forward Email API or a local sendmail, so you hear about an expiring certificate before your visitors do.
Tangerine
A drop-in replacement for the Node.js DNS resolver that sends lookups over DNS over HTTPS (DoH), with retries, timeouts, server rotation and caching.
Why we built it
Our mail servers look up MX, SPF, DKIM and DMARC records for every message. Tangerine sends those lookups encrypted over HTTPS and caches the answers, so they stay private and fast.
Bree
A job scheduler for Node.js that runs each job in its own worker thread, on a cron expression, a date, an interval or a human-friendly time, with concurrency limits and graceful shutdown.
Why we built it
Forward Email runs dozens of background jobs, from DNS checks to renewal reminders. Bree runs them on our own servers without a separate queue service, and a job that fails does not stop the others.
Cabin
A logging library for JavaScript and Node.js. It logs requests and errors from Express, Koa and Lad apps and from the browser, and can send them to Slack, Sentry, Datadog, Papertrail or your own endpoint.
Why we built it
Logs can leak personal data. Cabin masks passwords, card numbers, tokens and other sensitive fields before anything is written, so we keep our logs on our own servers instead of handing them to a logging service.
Lad
A full-stack Node.js framework built on Koa, with a web server, an API server, a Bree job scheduler, translations, email templates and security settings ready from the start.
Why we built it
Forward Email is built with Lad. The framework behind our web app and API is open source, so anyone can start a project from the same foundation.
Lass
A command-line tool that creates a new Node.js package with tests, linting, formatting, commit checks, a README and a license already set up.
Why we built it
We maintain many npm packages, including Tangerine, Bree and Cabin. Lass starts each new one the same way, so every package has the same tests and checks from its first commit.