Check your email security in seconds.
A quick, public check of your domain's SPF and DMARC records, the settings that stop someone else sending email that looks like it came from you. Type a domain below, no sign-up, no email address needed.
SPF
Checking...
DMARC
Checking...
DKIM
Checking...
MX
Checking...
This checks what's publicly visible in seconds. A full Email Security Review covers DKIM properly, checks for a safe DMARC rollout, and hands you a written fix list.
See Email Security Review pricingYour domain can be spoofed without you knowing
SPF, DKIM and DMARC are the three DNS records that tell other mail servers whether an email really came from your domain. Without them set up correctly, someone can send an email that appears to be from your business, to your own clients, and there's nothing stopping it.
DMARC has also become a practical delivery problem, not just a security one. Google and Yahoo now expect it before they'll reliably deliver your mail, so a missing or weak record can mean invoices and marketing emails quietly landing in spam.
DMARC done wrong can break your email
Jumping straight to a strict DMARC policy without checking what it would block first can silently stop legitimate email, invoices, newsletters, anything sent through a third-party tool, from ever arriving. A proper rollout monitors first, then tightens gradually. That's the part a five-minute DNS check can't tell you.
Want the full picture?
Tell me about your business and what's prompted the enquiry. I'll reply within one working day.