Email Security Check

Most cyber attacks start with email. Is your domain protected?

Enter your email address to check SPF, DKIM, DMARC, MTA-STS, TLS reporting, SSL, and hosting performance. We only test the domain and show clear next steps.

We only test the domain, and use your email to send the report.

What we check

  • Impersonation protection: DMARC enforcement (quarantine/reject) to block spoofing.
  • SPF: which servers are allowed to send email for the domain.
  • DKIM: cryptographic signing to confirm message integrity.
  • DMARC: alignment policy and reporting for failed authentication.
  • MTA-STS: enforces TLS for inbound email delivery.
  • TLS-RPT: reporting endpoint for TLS delivery failures.
  • Email provider: Google Workspace, Microsoft 365, or self-hosted based on MX.
  • SSL encryption rating: HTTPS availability and certificate validity.
  • Website security rating: HTTPS and HSTS presence.
  • Hosting speed: estimated response time for the homepage.