Email domain scanner
One click audits every email-security setting of a domain and tells you what to fix first.
5 free checks per day · then from $0.04 per check — pricing
What the Domain Scanner checks
- SPF syntax, lookup limit and policy
- DMARC policy, alignment and reporting
- DKIM on 80 common selectors
- MX, SMTP, STARTTLS and certificates
- MTA-STS, TLS-RPT, DANE and DNSSEC
- Blocklists for mail servers and the domain
- BIMI logo and certificate
How it works
- 1
Enter a domain
- 2
Get one grade plus a score per category
- 3
Work through the prioritized "Top fixes" list
Frequently asked questions
How is the grade calculated?
Each category gets a score from 0 to 100, weighted by its impact on deliverability and spoofing protection (DMARC 26%, SPF 20%, DKIM 18%, MX & TLS 14%, blocklists 12%, BIMI 6%, DNSSEC 4%). Domains without SPF or DMARC are capped at C.
My DKIM shows "not discovered" — is it missing?
Not necessarily. DKIM keys can only be found if the selector is known. We test 80 common ones; if yours is custom, check it in the DKIM Checker with your selector.
Does the scan send email?
No. We only read DNS and open a short SMTP session to your MX (connect, EHLO, STARTTLS, QUIT) — no message is sent.