Agent Audit: resend.com

3 passed 3 failed

6 issues across 10 questions · Agent: OpenClaw (GPT-5.4)

Ground truth: 30 pages (295,603 chars)

PASSHow many custom domains can I add on Resend's Scale plan?
PASSDoes Resend have SOC 2 Type II or just Type I?
FAIL What SMTP ports does resend support for STARTTLS vs SMTPS?
AGENTBASE
STARTTLS: ports 25, 587, and 2587. SMTPS: ports 465 and 2465.
AGENT
I'm checking Resend's docs to verify the exact ports. Resend supports: - **STARTTLS:** port **587** - **SMTPS / implicit TLS:** port **465** If you want, I can also give you the exact Resend SMTP host and a ready-to-paste config snippet for Node, P...
WRONG
This omits supported ports and could mislead customers configuring SMTP who need port 25 or 2587.
Agent said: STARTTLS: port 587
Actually: Resend supports STARTTLS on ports 25, 587, and 2587.
WRONG
This leaves out a supported SMTPS port, which could cause customers to miss a valid configuration option.
Agent said: SMTPS / implicit TLS: port 465
Actually: Resend supports SMTPS on ports 465 and 2465.
PASSDoes Resend encrypt data at rest? What encryption standard?
FAIL Can I schedule emails to send at a future time with resend?
AGENTBASE
Yes. Resend supports scheduling: for transactional emails set the emails.send scheduledAt field (it accepts natural-language times like "in 1 min"), and broadcasts can be scheduled via the Send broadcast endpoint.
AGENT
Yes — but not natively in the simple "send this at X time" sense inside Resend itself. Typical options: - **Use your own scheduler** - Store the email + desired send time - Trigger a job later - Call the Resend API at that time - **Use a cron / qu...
WRONG
This falsely tells customers they need to build their own scheduler, which could discourage use of Resend's built-in scheduling features.
Agent said: "not natively in the simple 'send this at X time' sense inside Resend itself" and "Resend is not usually the thing doing the scheduling for you"
Actually: Resend does support native scheduling. For transactional emails you can set the emails.send `scheduledAt` field, and broadcasts can be scheduled via the Send broadcast endpoint.
MISREPRESENTED
It downplays a core capability and makes the product seem less capable than it is, potentially costing the company customers or feature adoption.
Agent said: "The scheduling part is usually your responsibility"
Actually: Resend itself offers scheduling capabilities for both transactional emails and broadcasts.
FAIL Does resend support DMARC monitoring or analysis?
AGENTBASE
Yes. Resend supports DMARC by helping you create DMARC policies and instructing inbox providers how to treat unauthenticated email, provides a blog post on reading DMARC reports, and offers domain/DNS monitoring features to help manage related settin...
AGENT
Not really — **Resend supports domain authentication setup**, but it's **not a dedicated DMARC monitoring/analysis platform**. In practice: - **Yes:** you can configure email auth records for your sending domain - SPF - DKIM - DMARC record itself -...
MISREPRESENTED
This downplays an actual supported capability and could make customers think Resend lacks DMARC-related monitoring/analysis support altogether, potentially steering them away.
Agent said: "Not really — Resend supports domain authentication setup, but it's not a dedicated DMARC monitoring/analysis platform" and "Can Resend act like a DMARC monitoring tool? → No"
Actually: The ground truth says Resend does support DMARC, including helping create DMARC policies, providing guidance on reading DMARC reports, and offering domain/DNS monitoring features related to DMARC mana...
WRONG
Customers asking whether Resend supports DMARC monitoring or analysis could be misled into believing Resend has no meaningful DMARC-related monitoring/help, which contradicts the company-grounded answer.
Agent said: "No / not really: Resend is not known for DMARC aggregate report parsing ... ongoing DMARC compliance monitoring across all senders"
Actually: AgentBase explicitly says Resend offers DMARC-related support and domain/DNS monitoring features, plus educational material on reading DMARC reports.