Free tool

Business Email Security Checker

Can anyone send email pretending to be you?

Checks the three DNS records that stop email spoofing (SPF, DKIM, and DMARC) and tells you exactly which records to add or fix, with the exact values.

Results are informational, not a guarantee of security. These are passive, read-only checks. A clean report does not prove a site is secure, and a finding may have compensating controls we cannot see.

What we check

SPF: record present, single, and ending in a strict -all or ~all
SPF DNS-lookup count (over 10 voids the record per RFC 7208)
DKIM: signing keys published for common selectors
DMARC: record present with quarantine or reject policy
DMARC reporting address (rua) so you see who's spoofing you

Without SPF, DKIM, and DMARC, anyone can send email that appears to come from your domain: invoices, password resets, the lot. These three DNS records are what let receiving servers tell your real mail from a forgery.

Get a quote for email setup Request a quote