Company
Why email-validation.org is different
Everything we run is serverless code on Cloudflare Workers: no servers of our own, nothing to patch, and separate Workers, each with only the access it needs. That design is why the service is fast and secure. The result is backed by a 99.2% accuracy guarantee on the valid and invalid results of every bulk list, or your money back for the difference.
- Servers we run
- None
- Runtime
- Cloudflare Workers (V8 isolates)
- Calls to the validation service
- Only from our gateway Worker
- Result cache
- 12 months, under a keyed hash
- Accuracy
- 99.2% guarantee on bulk valid and invalid results
Serverless, everything we run.
No machines of ours to keep running, patch or scale: Cloudflare runs the code for the website, the API, bulk lists, billing and the credit ledger.
-
No servers to patch
The website, the API, bulk lists, billing, support and the ledger that holds your credits all run as code on Cloudflare Workers, with Cloudflare's storage behind them. We run no servers of our own, so there is no operating system of ours to fall behind on updates.
-
Isolated by design
Each Worker runs in its own V8 isolate, apart from other code. Ours are separate Workers, each with only the access it needs: the API never calls the validation service itself; one gateway Worker makes every such call.
-
Where the API runs
The API answers in the Cloudflare data centre that receives your request. After your first purchase, cached answers can check your credits in memory there; other requests check them with your account's ledger, in eastern North America for most accounts. Checks not in our cache go on to our validation service from US East.
Fast by design. Time it yourself.
We do not quote a speed here. Our live latency page shows how long the API takes, and lets you time it from your own browser.
-
Recent answers come back at once
Valid, invalid and risky answers are kept for 12 months in our result cache, so asking again needs no mail server. Unknown, catch-all and mailbox_full results are always checked again.
-
A 15-second ceiling
No check runs longer. If a mail server is slower, the result is unknown, and unknown is free.
-
500 requests per second
Up to 500 validation requests per second per account once you have made a purchase. Lists of up to 1,000,000 rows run as bulk jobs.
-
Pages that call no one else
Our pages make no third-party requests; the bot check loads only when you use a form that needs it. No external stylesheet, font or blocking script delays the first paint.
Secure by design. A result cache without addresses.
Our result cache keeps only the result of a completed check, for 12 months, under a keyed hash of the address. Without our secret key, the hash cannot be turned back into the address. Checks you run in the dashboard stay in your history for 30 days, and uploaded lists are deleted 30 days after upload.
- The address you checknot stored
- HMAC-SHA256 with a secret keyone way
- Only the result, for 12 monthsresult only
-
No passwords. Passkeys built in.
Sign in with a passkey, Google or a one-time code. API keys are shown once, stored as a hash, and refused in a URL.
-
Encrypted and locked down
Every connection uses HTTPS (TLS 1.2 or newer) with HSTS. A strict Content Security Policy guards every page, with Trusted Types on our content pages and the dashboard.
-
An admin area you cannot reach
It runs on its own site behind an access gateway and requires a passkey. Every admin sign-in is logged.
-
Nothing to track you with
No tracking cookies. Our logs never hold the addresses you check, API keys or IP addresses. Our mail is DKIM-signed, with DMARC reject and MTA-STS enforced.
Accurate, and guaranteed.
Speed and serverless code do not make a result right on their own. What we stand behind is the result: a 99.2% accuracy guarantee on the valid and invalid results of every bulk list, or your money back for the difference.
Results come in four statuses, valid, invalid, risky and unknown, each with a reason and a recommended action. Unknown results never cost a credit.
Get 500 free credits. No card needed.
Try it on your own list before you buy.
Frequently asked questions
Is email-validation.org serverless?
Yes. Everything we run, from the website and the API to billing and the credit ledger, is code on Cloudflare Workers. We run no servers of our own. Checks that are not in our cache go on to our validation service in the United States.
Where does the API run?
The API answers in the Cloudflare data centre that receives your request. After your first purchase, cached answers can check your credits in memory there; other requests check them with your account's ledger, in eastern North America for most accounts. Checks not in our cache go on to our validation service from US East.
Is accuracy guaranteed?
For bulk lists, yes: a 99.2% accuracy guarantee on the valid and invalid results of every bulk list, or your money back for the difference. Serverless code makes the service fast and secure; the guarantee is what stands behind the result. Our guarantee page explains how accuracy is measured and how to claim.
Updated · Maintained by the email-validation.org team