Free email security check
Enter your domain. In about ten seconds you will see how well it is protected against spoofing and what to fix. We only read public DNS records, the same ones every mail server reads. Nothing on your network is scanned.
What we check
The list of servers allowed to send email as you, and whether it stays under the 10-lookup limit receivers enforce.
The policy that tells Gmail, Outlook and everyone else to reject mail that pretends to be you. This one matters most.
A signature on each message that proves it really came from your mail system and was not changed on the way.
Forces other mail servers to use an encrypted connection when they deliver mail to you.
Tells you when encrypted delivery to your domain fails, so a problem does not go unnoticed.
Signs your DNS records so nobody can quietly swap in fake ones.
Why it matters
If your domain has no enforced DMARC policy, a scammer can send a “new bank details” email that shows your real address in the From line. Your clients have no easy way to tell.
Gmail, Yahoo and Microsoft now check SPF, DKIM and DMARC on incoming mail. Missing or broken records are a common reason invoices and proposals go to junk.
Cyber insurance applications and security questionnaires often ask whether you use DMARC. This check tells you the honest answer.
Free assessment
