Cybersecurity · Free Tool
Check your email health.
Can someone send email pretending to be your company? Enter your domain and get an on-the-spot report on how well it is protected against spoofing and phishing.
Run a check
Enter the part after the @ in your email address. You can also paste an email address or website URL. The check reads publicly published DNS records only.
The check runs in your browser. It looks up your domain's public DNS records through Cloudflare's DNS service, falling back to Google's. Nothing is sent to or stored on this website, and the download link is destroyed after 15 minutes.
What You Get
A clear picture of
your email defences.
Mailbox setup (MX)
Whether your domain is set up to receive email at all.
Approved senders (SPF)
Whether you publish a list of servers allowed to send email as you. Without it, scammers can easily forge your address.
Digital signature (DKIM)
Whether your outgoing email is cryptographically signed, so receivers can tell it wasn’t tampered with.
Spoofing policy (DMARC)
Whether you tell other providers what to do with fake email that claims to come from your domain.
Encrypted delivery (MTA-STS)
Whether you require email to your domain to travel over an encrypted connection.
Certificate control (CAA)
Whether you restrict which authorities may issue SSL/TLS certificates for your domain.
Need Help Fixing It?
Turn the report
into fixes.
If the report flags gaps, I can help you prioritise and close them as part of a cybersecurity engagement.