Shared host = shared reputation.
Your WordPress site is one of 4,000 tenants on a shared IP. When the tenant next door spams, the IP gets blacklisted — and so do your password resets, WooCommerce receipts, and contact form leads.
Hosted relay (no Gmail OAuth, no SendGrid key, no SMTP credentials). Outbound AI abuse detection (your domain stays clean even if your site gets hacked). One dashboard across every site you manage. DKIM for your custom domain in two clicks.
Free tier: 100 routed emails / month · all 5 reliability layers · AI abuse scan included on every plan.
Cross-site mail relay
All routing5 sites · last 24 hours
maplecreek.co
CF7 → DKIM ok
bramble-digital.com
WPForms → DKIM ok
harbour.studio
Forminator → DKIM ok
centrepoint.com
Gravity → DKIM ok
flora.studio
Elementor → DKIM ok
Why WP email is broken
wp_mail() is broken by design.The default WordPress mailer dates from 2003 and hasn’t materially changed. Modern inboxes have moved on — they expect DKIM, SPF, DMARC, abuse hygiene. WordPress doesn’t provide any of it.
Your WordPress site is one of 4,000 tenants on a shared IP. When the tenant next door spams, the IP gets blacklisted — and so do your password resets, WooCommerce receipts, and contact form leads.
Default wp_mail() ships unsigned messages from an unauthenticated sender. Gmail, Outlook, and Yahoo treat that as spam-by-default in 2026. Your transactional mail gets quarantined before the recipient even sees it.
If a contact form plugin gets popped, attackers send spam through your authenticated SMTP. Your domain gets blacklisted. Every future legit email — for years — lands in spam. There's no undo button.
WP Mail SMTP, Post SMTP, FluentSMTP — all solve the 'credentials' half by letting you wire Gmail/SendGrid/SES into wp_mail(). None of them have outbound abuse detection. None of them give you cross-site visibility. All of them still require you to manage SMTP credentials yourself.
SecureSMTP isn’t a single-purpose mail relay — it’s a platform with cross-site visibility, outbound AI abuse defence, and a hosted relay that means you never manage SMTP credentials yourself.
Most SMTP plugins still make you wire Gmail OAuth, SES IAM, SendGrid keys, or Mailgun creds into WordPress yourself. SecureSMTP is the relay — you don't manage credentials. The plugin authenticates with your SecureSMTP site key (which you can rotate from the dashboard); the relay handles the rest.
We scan every outbound message with a 3-layer pipeline (volume anomaly cron, content heuristic, and Anthropic Claude Haiku 4.5 sampling). If your site gets popped and starts spamming, we refuse the bad mail before it ever leaves — protecting your domain reputation. No other SMTP plugin does this.
Manage 50 client sites in one place. See last-24-hour mail volume, anomaly status, and DKIM health per site without logging into each WordPress dashboard. Per-site quotas, per-site API keys, per-site mail log — all visible from the agency-wide /app/forms/sites view.
Bring your own domain — add one TXT record and the dashboard verifies it. Your outgoing mail is signed with your domain's key, not ours. No Mailgun account juggling, no SES verification flow, no DMARC alignment fiddling. Agency sites can each have their own custom sending domain.
wp_mail()We hook the canonical pre_wp_mail filter — which means every plugin that follows the WordPress mail API is supported automatically. Here are the ones our customers ask about most.
PHPMailer interceptor included — if a plugin instantiates PHPMailer directly (skipping wp_mail()), our v1.18+ plugin still catches the outbound message. Nothing slips past.
Deliverability is a stack of small things done right, not one big trick. Every layer catches a different failure mode that breaks WordPress email.
Your WordPress site sends from Resend's pre-warmed IPs with established sender reputation across Gmail, Outlook, Yahoo and Apple Mail. The shared-hosting reputation problem disappears — your wp_mail() now leaves from infrastructure that mailbox providers trust.
Every wp_mail() call is cryptographically signed with a 2048-bit DKIM key before leaving. SPF is aligned to the sending domain. DMARC at the recipient end honors both, so transactional mail passes authentication checks every time.
Three-layer scan: volume anomaly cron compares each site's last hour to its 30-day baseline; content heuristic scores spam keywords/URLs/TLDs; Anthropic Claude Haiku 4.5 reads subject + body on sampled mail. If your site gets hacked and starts spamming, we refuse the bad mail before sending — protecting your domain reputation.
Each WordPress site you connect has its own quota window. If something on one of your sites goes haywire (buggy notification plugin, brute-force form bot), we throttle that site's outbound mail before reputation damage spreads to the rest of your portfolio.
If the SecureSMTP platform is ever unavailable, WordPress's native mailer takes over automatically. wp_mail() never silently drops a message. The plugin logs the fallback so you know it happened, and you can retry the affected sends from the dashboard once SecureSMTP is back.
All five layers ship on every plan — including the free one. Reliability isn’t a paywalled feature.
To be clear: WP Mail SMTP, Post SMTP, FluentSMTP, and Easy WP SMTP are good plugins with real users. They solve the "connect Gmail / SES / Mailgun to WordPress" problem. SecureSMTP solves a different shape of problem — hosted relay, cross-site visibility, outbound AI. They’re different categories.
| Feature | SecureSMTP | WP Mail SMTP | Post SMTP | FluentSMTP | Easy WP SMTP |
|---|---|---|---|---|---|
| Setup time | 30 sec | 15–60 min | 15–60 min | 15–60 min | 15–40 min |
| Needs SMTP credentials | — | ||||
| Hosted relay (no Gmail/SES/SG) | — | — | — | — | |
| DKIM signing built-in | DIY config | DIY config | DIY config | DIY config | |
| Email log dashboard | Pro only | — | |||
| Cross-site dashboard | — | — | — | — | |
| AI outbound abuse scan | — | — | — | — | |
| Per-site rate limiting | — | — | — | — | |
| Fail-safe fallback to native | — | — | — | — | |
| Custom domain DKIM (one-click) | — | — | — | — | |
| Works with every form plugin | Mail only | Mail only | Mail only | Mail only | |
| Free tier — email volume | 100/mo, all features | Unlimited (BYO SMTP) | Unlimited (BYO SMTP) | Unlimited (BYO SMTP) | Unlimited (BYO SMTP) |
| Cost (paid) | $7+/mo | $49+/yr | Free | Free | $49+/yr |
Honest caveat on free tiers.
Legacy SMTP plugins are technically free at any volume because you bring the SMTP credentials — they don’t bear the sending cost. SecureSMTP’s hosted relay does, which is why our free tier is bounded at 100/mo. If you have Gmail’s 500/day under-the-radar limit covered and just need a wire, the legacy plugins win on price. If you want a managed relay + reputation protection + AI + cross-site, SecureSMTP wins on value.
Comparison reflects each vendor’s default behaviour as of 2026-06. Pricing and feature availability change — verify on each vendor’s page before committing.
One flat price per plan covers everything — form submissions and the email relay. Below are the routed-WordPress-email quotas per tier, included in the price you already pay.
Free
$0 /mo
For solo users and side projects.
WordPress emails / month
100
all plugins, all wp_mail() calls
Starter
$7 /mo
For small businesses & creators.
WordPress emails / month
2k
all plugins, all wp_mail() calls
Pro
$19 /mo
For growing teams that care about brand.
WordPress emails / month
20k
all plugins, all wp_mail() calls
Business
$49 /mo
For high-volume teams & multi-brand campaigns.
WordPress emails / month
100k
all plugins, all wp_mail() calls
Every paid plan has a 14-day free trial — no credit card required.
Twelve questions we hear most before someone switches from a legacy WP SMTP plugin.
This is the umbrella WP SMTP page. For per-plugin specifics, jump to a sibling.
SecureSMTP SMTP — umbrella overview
Every form plugin, every wp_mail() call, one relay.
Read moreContact Form 7 SMTP
Fix CF7's legendary "stopped sending emails".
Read moreForminator SMTP
Same fix for WPMU DEV's Forminator forms.
Read moreAI-powered SMTP
How we use Claude Haiku to read outbound mail.
Read moreInstall SecureSMTP, paste your API key, flip Email Delivery on. The hosted relay handles credentials, DKIM, abuse detection, and cross-site visibility — so you can go back to building your site.
Free tier · 100 routed emails / month · all 5 reliability layers + AI abuse scan included.