Email Security Check
A free tool that checks whether a domain is protected against fake email, and gives the exact records to fix it.
Most small businesses I work with have never looked at their SPF, DKIM or DMARC records, and many have gaps that make it easy for someone to send convincing email in their name. This tool checks a domain in a few seconds and explains the results in plain language, with the exact DNS records to add.
It runs entirely in the browser. The page asks Cloudflare’s public DNS over HTTPS (with Google as a backup), so there is no server to run and nothing is stored.
What it does
- Recognises Microsoft 365, Google Workspace and other providers, and tailors the fixes to them
- Follows SPF includes to count DNS lookups against the limit of 10
- Looks for DKIM keys under common selector names, estimates key size, and lets you enter your own selector
- Checks DMARC policy, reports and subdomain inheritance, plus MTA-STS, TLS-RPT, DNSSEC and BIMI
- Shareable result links, and tests for the record parsing and checks