Email deliverability Q&A

What is Microsoft SNDS?

Samuel Chenard

By Samuel Chenard · CEO & Co-Founder, Palisade · Reviewed July 20, 2026

Microsoft SNDS (Smart Network Data Services) is Microsoft's free portal showing how Outlook.com rates mail from IP addresses you own. Per IP, per day, it reports filter results, complaint rates, and message volume. Its companion program JMRP forwards you a copy of every message an Outlook.com user marks as junk. Both are IP-based, not domain-based.

At a glance
What it isFree Microsoft portal reporting Outlook.com's view of your sending IPs
GranularityPer IP address, per day; no domain-level view
Data shownFilter results (green, yellow, red), complaint rate, message volume for the IP
Minimum trafficData may be absent for IPs sending fewer than 100 messages that day
Retention90 days of daily data; aggregated around midnight PST
Companion programJMRP: forwards the full message, with headers, of every user junk report
CostFree. Requires a Microsoft account and proof you control the IPs.

SNDS is Microsoft's rough equivalent of Google Postmaster Tools, built years earlier and shaped very differently. You register the IP addresses, IP ranges, or ASNs you own, prove control of them, and Microsoft shows you how Outlook.com's filters rated the mail those IPs sent each day. Microsoft describes it as insight into "the health of your IP space as viewed by the Outlook.com system".

The defining design choice is that SNDS is IP-based, not domain-based. If you send through a shared ESP pool (Mailchimp, Klaviyo, most marketing platforms on standard plans), you cannot register those IPs because you do not control them; the platform does. SNDS is most useful when you run your own MTA, a dedicated IP, or you are an MSP or ISP responsible for a block of address space.

The portal itself moved in mid-2026. The long-standing sendersupport.olc.protection.outlook.com address now permanently redirects to Microsoft's new SNDS home on substrate.office.com, and JMRP enrollment now lives inside the new SNDS site. Old bookmarks still resolve; new documentation lives at the new address.

Five steps to set up Microsoft SNDS and JMRP: register your IP space, confirm ownership via an authorization email, enroll in JMRP, automate complaint suppression, and review weekly alongside DMARC aggregate reports.

What SNDS shows for each registered IP

Data pointWhat Microsoft reportsHow to read it
Filter resultGreen (spam under 10%), yellow (10% to 90%), red (over 90%), per IP per dayThe single most important column; red means Outlook.com is junking most of your mail
Complaint rateShare of delivered mail that Outlook.com users reported as junkMicrosoft notes more than 30% of IPs mailing Outlook.com stay under 0.3%; treat that as the bar
Message volumeMessages the IP sent to Outlook.com that dayA volume spike you did not send is the classic compromised-server tell
Trap hitsCount of messages sent to Microsoft-maintained accounts that never solicit mailRemoved from the Data Report as of July 22, 2026; Microsoft cautioned that transition-period counts should not be read as exact values
Sample messagesExcerpts of mail the filters flagged, for diagnosisUseful for spotting which stream or campaign is triggering the filter

Data is aggregated once a day at approximately midnight PST and kept for 90 days. Microsoft states that mail traffic and spam data may not be present for IPs that sent fewer than 100 messages on a given day, so low-volume senders often see empty days. All figures checked against Microsoft's SNDS FAQ on 2026-07-20; links in Sources.

Signing up: prove you control the IPs

Registration is free but gated on ownership. You sign in with a Microsoft account and request access to "an IP, IP range, or Autonomous System Number (ASN) that you own". Microsoft then looks up who is responsible for that address space and offers a short list of authorization email addresses derived from it (WHOIS and abuse contacts, postmaster@, and similar). You pick one you can read, Microsoft mails it a confirmation link, and clicking the link completes access.

This is the step that stops most marketing teams cold: if your mail leaves from your ESP's shared pool, the authorization addresses belong to the ESP, not to you. That is not a bug. SNDS answers the question "how does Outlook.com rate this network?", and the network owner is the party who can act on it. If you are on shared IPs, your lever is authentication and list quality, and the reputation view that follows your domain across any IP is your DMARC aggregate data, not SNDS.

JMRP: the complaint feedback loop

JMRP (Junk Mail Reporting Program) is the second half of the package, and you enroll in it from inside SNDS. Microsoft describes it as "a free service to provide reports on junk email issues reported by Outlook.com users" which "returns the full message with headers of any email marked as 'junk' or 'phishing'". In practice: an Outlook.com user clicks Report junk, and a copy of that exact message lands at the reporting address you configured, typically within as little as 72 hours.

That per-message detail is something Google Postmaster Tools does not give you; Google shows an aggregate spam-rate line, while JMRP hands you the actual complained-about email. Wire the JMRP address into your suppression pipeline so every complainer is unsubscribed automatically. Continuing to mail someone who reported you as junk is how a yellow filter result turns red.

The limits: what SNDS will not tell you

SNDS has real blind spots, and knowing them saves you from staring at the wrong dashboard. It covers the consumer Outlook.com filter, not Microsoft 365 business tenants, whose Defender-based filtering makes its own decisions; a green SNDS day does not guarantee delivery to corporate Exchange Online mailboxes. It is daily-batch, so today's incident shows up tomorrow. It says nothing about your domain reputation, DKIM alignment, or which sending service produced the failing mail.

It is also observational only. SNDS shows you the score; it does not change it. If Outlook.com is actively rejecting or junking your mail right now, start with the dedicated walkthrough at /email-deliverability/why-is-outlook-blocking-my-emails, which covers Microsoft's requirements for senders (including the May 5, 2025 rule directing mail from 5,000-plus-message-per-day senders without SPF, DKIM, and DMARC to junk, with rejection to follow) and the fix order.

Reading SNDS signals

What you see in SNDSWhat it usually meansWhat to do
Filter result flips green to yellow or redContent, list quality, or authentication degraded on that IPCheck JMRP complaints and DMARC reports from the same date range
Complaint rate above roughly 0.3%Recipients did not expect the mail; list or consent problemTighten opt-in, suppress every JMRP complainer, slow the ramp
Volume spike you did not sendCompromised server, open relay, or abused web form on your networkLock the host down first; reputation repair is pointless while it leaks
No data at all for an IPUnder 100 messages to Outlook.com that day, or the IP is not actually sendingConfirm the IP is your real egress; low-volume senders should not expect daily data
Green in SNDS but Outlook still rejects mailDomain-level problem: authentication or Microsoft's sender requirements, not IP reputationRun the Microsoft compliance check and read the bounce code against the SMTP reference

If Microsoft's rejection notice includes a code such as 550 5.7.509 (unauthenticated) or 550 5.7.1 (policy block), match it in the SMTP error-code reference at /learning/smtp-error-codes for the verbatim string and the per-code fix. This page stays on the dashboards.

Five steps to set up Microsoft SNDS and JMRP: register your IP space, confirm ownership via an authorization email, enroll in JMRP, automate complaint suppression, and review weekly alongside DMARC aggregate reports.

How to fix it

  1. Check your Microsoft-specific compliance first

    Run your sending domain through the free Microsoft compliance checker below. It tests your SPF, DKIM, and DMARC against Microsoft's published sender requirements in one pass, which covers the domain-side failures SNDS cannot see.

    Run the check now

    Enter your sending domain and the check runs instantly on the next page. Free, no signup.

  2. Register your sending IPs in SNDS

    Sign in at Microsoft's SNDS portal with a Microsoft account, request access to the IPs, ranges, or ASN you control, and confirm via the authorization email. If you cannot receive any of the offered addresses, the IPs are not yours to register; skip to DMARC data instead.

  3. Enroll in JMRP and automate suppression

    From inside SNDS, enroll the same IPs in the Junk Mail Reporting Program and point it at a monitored address. Feed every returned complaint into your suppression list automatically; a complainer mailed twice is a reputation problem you chose.

  4. Set a weekly SNDS review, not a daily vigil

    Data lands once a day and persists for 90 days, so a weekly pass catches trends without noise. Watch for filter-color changes, complaint rates drifting toward 0.3%, and any volume you cannot account for.

  5. Pair SNDS with DMARC aggregate reports

    SNDS shows one receiver's view of IPs you own; DMARC reports show every receiver's view of every IP sending as your domain, including the ones you cannot register. Together they cover both halves of the reputation picture.

Related free tools: IP reputation checker · Domain reputation checker · DMARC checker

SNDS is a window; enforcement is the fix

SNDS and JMRP are pure monitoring: they tell you, a day later, how one provider judged mail from IPs you happen to own. They do nothing about the spammer using your domain from an IP you have never seen, and that spoofed traffic drags down the domain reputation that follows you across every pool and provider.

The durable fix is DMARC at p=reject with every legitimate sender authenticated: receivers drop the spoofed mail outright, your SNDS complaint rate stops absorbing blame for mail you never sent, and the dashboards go back to measuring what you actually send.

DMARC software that does the work

Palisade's AI agent hosts your SPF, DKIM, and DMARC records and takes every domain to p=reject automatically. Your first domain is free.

First domain free forever

Why it matters for MSPs

For an MSP, SNDS is a per-network tool, so it maps cleanly onto clients who run their own mail infrastructure and not at all onto clients on shared ESP pools. Register the ranges you actually manage (you can register a whole ASN once, rather than per-client IPs), route JMRP complaints into your ticketing so a complaint spike opens a ticket against the right tenant, and treat SNDS as the Outlook-side early warning next to each client's DMARC data. Palisade covers the domain half across the whole book: hosted SPF, DKIM, and DMARC records per client domain, continuous report monitoring, automatic progression to p=reject, and native ConnectWise, HaloPSA, and Autotask integrations so the alert lands in your PSA. Your own MSP domain runs free as an NFR domain.

Frequently asked questions

Yes. Microsoft describes both SNDS and JMRP as free services. The only requirements are a Microsoft account and passing the authorization step, which proves you control the IP, range, or ASN you are registering by clicking a link sent to an address associated with that network.

SNDS is the dashboard: per-IP, per-day filter results, complaint rates, and volume as Outlook.com saw them. JMRP is the feedback loop: it forwards you the full message, with headers, each time an Outlook.com user marks your mail as junk or phishing. You enroll in JMRP from inside SNDS.

Same role, different axis. Google Postmaster Tools is domain-based: you verify a domain via DNS and see aggregate reputation. SNDS is IP-based: you prove control of address space and see per-IP data, plus actual complained-about messages through JMRP, which Google does not provide. Serious senders run both.

Generally no. SNDS authorization requires receiving mail at an address tied to the IP's registered owner, and shared-pool IPs belong to the ESP. The ESP monitors those pools itself. On shared IPs, your visibility comes from DMARC aggregate reports and the ESP's own deliverability reporting instead.

Most often, volume. Microsoft states that mail traffic and spam data may not be present for IPs that sent fewer than 100 messages to Outlook.com on a given day. Data also lags: aggregation runs around midnight PST for the previous day. Persistent emptiness usually means that IP is not your real egress.

Microsoft publishes no hard threshold, but its SNDS FAQ notes that more than 30% of IPs sending to Outlook.com keep complaint rates under 0.3%, which matches the 0.3% spam-rate ceiling Google publishes in its sender guidelines. Stay under 0.3%, and investigate any drift toward it before the filter color changes for you.

Yes. Microsoft announced that trap hit counts leave the SNDS Data Report as of July 22, 2026, to protect its anti-abuse systems, and cautioned that transition-period trap counts should not be interpreted as exact values. The remaining signals, filter results and complaint rate, are the ones to manage to.

No. SNDS reflects the consumer Outlook.com filtering system. Microsoft 365 tenants filter through Defender for Office 365 with per-tenant policies, so mail can rate green in SNDS and still land in junk at a business tenant. For those, authentication, the compliance checker, and the recipient tenant's message trace are the tools.

Sources

Every benchmark above was verified against the vendor's own documentation on the date shown.

Related reading

Email deliverability, fixed: the full guide