Email security checker

What this tool can and cannot see. Most checks read public DNS records right in your browser using encrypted DNS-over-HTTPS. Three go a level deeper on our server: SPF lookups are counted by resolving the full include tree, the MTA-STS policy file is fetched and parsed, and the BIMI logo is checked, all from public sources, with nothing stored. It does not connect to your mail servers, so it cannot test live delivery, STARTTLS, or your server's TLS certificate. DKIM is published under a private "selector" name, so we probe the common ones used by Google Workspace, Microsoft 365 and major senders; a "not found" result can simply mean you use a custom selector. For a full, authenticated review of your email security, talk to us.