Overview

Scrut integrates with Mailgun to document email sending configuration (domains, API keys, permissions) and user access. Use it to govern who can manage keys/sending and support audit evidence for communications security.

Why Connect

• Track who can manage domains, API keys, and sending access.
• Reduce risk from unmanaged email credentials.
• Support evidence for communications security controls.

Supported Automated Tests

Scrut provides pre-built automated tests for Mailgun. Here are a few examples of Scrut’s Mailgun tests:

• Access reviews completed for all in-scope applications
• Mailgun accounts associated with users
• Mailgun accounts deprovisioned when employees leave

Supported Automated Evidence

Scrut automates the collection of some evidences for Mailgun. Here are a few examples of Scrut’s Mailgun-driven evidences that can be collected:

• Offboarding - Logical Access & Physical Access Revocation
• Reports of User Access Reviews
• User Access Approval list to Application, Infrastructure and Service