Free tool · Email Security Check
Could someone send email as your business?
Enter your domain. We look up your live SPF, DKIM and DMARC records and grade them A to F, with the fix for each gap. No email required.
What we check
Three records that stop spoofing.
New to these? Read SPF, DKIM and DMARC, explained without the jargon.
- What is SPF?
- A DNS record listing the services allowed to send email for your domain.
- What is DKIM?
- A signature on each message that proves it came from you and wasn't changed. We check common selectors; custom ones may not show.
- What is DMARC?
- The record that tells receivers what to do with mail that fails SPF and DKIM: deliver, quarantine or reject.
- Do you store my domain?
- Results are cached for five minutes to keep the tool fast. We only keep your email if you ask for the full report.
Got a C or lower? We'll fix it in week one.
Email authentication is set up and monitored on every HeptaShield plan.
No pressure. If your setup is fine, we'll tell you.