Portfolio
€9 / month
- ✓ 1 SES connection (AWS account + region)
- ✓ 100k Control-mode recipients/month
- ✓ 1 signed webhook
Amazon SES operations for multi-product builders
Know your SES.
Control the risk.
Monitor every Amazon SES account, region, and domain from one workspace. Keep delivery in your AWS account, then use AllStackd’s durable API when you need transactional sending.
No card required · Founder-assisted setup available
- Your AWS role
CloudFormation only. No long-lived access keys.
- Observe first
Health and reputation before any traffic moves.
- Your SES account
Delivery stays in AWS. AWS bills the sends.
- Findings in the dashboard
DKIM drift, sandbox, and quota issues surface before the next release.
SES CONNECTIONS / HEALTHOBSERVE
eu-central-1 / product-aHealthy
us-east-1 / client-storeDKIM drift
eu-west-1 / internalSandbox
NEXT SAFE ACTION
Restore one missing DKIM record before the next release.
Architecture
AllStackd operates the layer above SES.
Your AWS account remains the delivery system. AllStackd is the health view, policy gate, and optional sending API.
Your products
- App A
- App B
- Client stacks
AllStackd
- Health
- API keys
- Templates
- Queue
Your AWS
- IAM role
- External ID
- SES region
Recipients
- Amazon SES delivery
Two operating modes
Start useful before you move traffic.
01
Observe
See SES identities, DKIM, sandbox status, quotas, and reputation without routing email through AllStackd.
02
Control
Add a durable, policy-enforced sending layer project by project while keeping delivery in your AWS account.
One workspace for many connections
Operate multiple products, client AWS accounts, and SES regions from one health view. Portfolio, Studio, and Agency are plan names that size how many SES connections you can attach — not a third trust level.
01
AWS + SES
Verify a domain in SES and leave the sandbox when ready. Official AWS docs are linked in our setup guide.
02
CloudFormation role
Download the AllStackd template, upload it in your account, paste the three stack outputs. No SES passwords.
03
Domain health
Confirm DKIM, SPF, and DMARC on Domains. Owned domains only.
04
Optional Control API
Assign the connection to a project, create an as_ API key, send with idempotency.
Why not only the SES console?
SES delivers. AllStackd operates.
Amazon SES already sends mail. AllStackd is the layer you add when checking every account by hand has become the risk.
Operate accounts and regions separately
One workspace across SES connections
Manual identity and DKIM checks
Health findings with a next safe action
App-specific SES credentials
Project-scoped API keys
DIY queue and retry logic
Durable Control-mode sending workflow
Built for operational sprawl
Several products. One accountable view.
Ideal when “check every AWS account manually” has become a real risk, but replacing SES is unnecessary.
Founders and studios
Track identities, quotas, sandbox state, and reputation across the products you operate.
Agencies
Separate client AWS access and make health issues visible before campaigns or releases.
Freelance developers
Keep each client’s SES account apart and catch DKIM or sandbox issues before they do.
SaaS teams
Watch quotas, bounces, and domain health for the transactional mail your product already sends.
You probably do not need AllStackd
One SES account, one product, low volume — stay in the Amazon SES console.
AllStackd fits when
You run several products, regions, or client AWS accounts and need one health view before mail fails silently.
Simple footprint pricing
Start small.
See the whole estate.
Every plan includes Observe and Control. An SES connection is one AWS account in one region. Start a 14-day trial with no card — checkout is required after. AWS delivery charges are separate; team seats are not in this beta.
Studio
Best fit€29 / month
- ✓ 5 SES connections
- ✓ 500k Control-mode recipients/month
- ✓ 5 signed webhooks
Agency
€79 / month
- ✓ 25 SES connections
- ✓ 2m Control-mode recipients/month
- ✓ 20 signed webhooks
- ✓ One operator · many client connections
Recipients/month count Control-mode recipients submitted through AllStackd. Observe does not meter mail you send outside AllStackd. Prices exclude Amazon SES / AWS delivery charges and may exclude tax. No card until checkout.
Open to customers worldwide. Connect your own AWS account — see the AWS / SES setup guide.
FAQ
What AllStackd is.
What is AllStackd?
AllStackd is an operations layer for Amazon SES. It shows domain health, quotas, sandbox status, and reputation across the products and AWS accounts you already run, and it can queue transactional email through your own SES account.
Does AllStackd host email or replace Amazon SES?
No. AllStackd is not an email host. Messages are delivered by Amazon SES in your AWS account, and AWS bills you for those sends. AllStackd bills only for the operations workspace.
Do I paste AWS access keys or SES SMTP passwords?
No. You download a CloudFormation template from AllStackd, upload it in your AWS account, and paste back the role, SNS topic, and configuration set outputs. AllStackd assumes that role with a unique External ID. Long-lived access keys are not used.
Who is AllStackd for?
Founders and studios, agencies, freelance developers, and SaaS teams who operate more than one product or client on Amazon SES and want one health view before they change how mail is sent.
How much does AllStackd cost?
Plans are priced by SES connection (one AWS account in one region) and Control-mode recipients. Portfolio is €9 per month or €89 per year, Studio is €29 per month or €289 per year, and Agency is €79 per month or €789 per year. A 14-day trial starts when you choose a plan. No card is required during the trial. After 14 days, checkout is required to keep access. Prices exclude Amazon SES charges and may exclude tax. Signup is open worldwide. Agency means one operator managing many client connections — team seats are not part of this beta.
What happens if AllStackd is down?
Mail already accepted by Amazon SES continues to deliver in your AWS account. Observe health checks pause until the service recovers. Control-mode sends wait in the durable queue and are retried; there is no stated SLA during the paid beta.