Free email security check
Enter your business domain to see whether other people can send email pretending to be you. You get a grade and a plain-English fix for each finding.
Passive and free. No sign-up. What this check does
What this tool does and does not do. It is passive: it only reads information that is already public. It looks up public DNS records for your domain. It does not scan ports, crawl your site, fuzz forms, try to log in or probe for vulnerabilities. We do not ask for your name or email address. The domain you enter is sent to our checker service to run the lookups; see our privacy page. Only check domains you own or manage.
What we check
- MX: where your domain receives mail (or a null MX if it never does, RFC 7505).
- SPF: which servers may send mail for you (RFC 7208).
- DKIM: whether a signing key is published at common selector names (RFC 6376).
- DMARC: your policy for mail that fails SPF and DKIM (RFC 7489).
- BIMI (optional): a brand logo record (BIMI Group).
- MTA-STS (optional): a policy that asks senders to use encrypted delivery (RFC 8461).
How the grade works is explained on our methodology page.
FAQ
Is this email security check free?
Yes. There is no sign-up and no email gate.
Why does it say DKIM was not found when I have DKIM?
DKIM keys live at a selector name chosen by your provider. We only try common selector names, so a custom selector can look missing. Check your provider's admin console to confirm.
Can this check harm my email?
No. It only makes the same public DNS lookups that every mail server makes when you send an email.