Free tool

Email security check

Find out in seconds whether criminals can send email as your domain — and why your messages might be landing in spam.

Only public DNS records are checked. Nothing is stored.

What we check

Six records that decide where your email lands

SPF
Lists the servers allowed to send email for your domain. Too many lookups and it silently breaks.
DKIM
A cryptographic signature that proves a message really came from you and wasn’t altered.
DMARC
Tells receivers what to do when SPF or DKIM fail — and sends you reports on who is using your domain.
MTA-STS
Forces other mail servers to use encrypted connections when delivering email to you.
TLS-RPT
Sends you reports when encrypted delivery to your domain fails, so problems don’t go unnoticed.
BIMI
Shows your verified logo next to your emails in supporting inboxes like Gmail and Apple Mail.

Want it fixed properly?

We’ll take your domain from exposed to fully enforced — SPF, DKIM, DMARC at p=reject, MTA-STS and reporting — without breaking a single legitimate email.