For Email Deliverability & DMARC Consultants
Find the businesses anyone can send email as, and prove it in one line.
Google, Yahoo and Microsoft now reject or junk bulk mail from domains without working authentication, and most small businesses still have no enforced DMARC policy. SiteAssay finds them, reads their SPF, DKIM, DMARC and BIMI records, checks their mail servers against the blocklists, and prints the evidence in a report you can put your name on.
- 4
- Email authentication records read on every domain: SPF, DKIM, DMARC and BIMI
- 0
- Emails sent to test anything. Every check is a public DNS lookup
- 252
- Signals behind every report, with the email finding beside the rest of the site
- 7
- Days of free trial, with no card, to run it on your own market
The findings that turn into a DMARC project
Each one is binary, checkable by the owner in a minute, and maps to work you already sell.
No DMARC, or a policy of none
A domain with no DMARC record, or one set to p=none, tells receiving servers to deliver forged mail anyway. The report shows the record as it stands and the policy it should carry.
Broken or missing SPF and DKIM
No SPF record, an SPF record that ends in a neutral all, or no DKIM key on the selectors the common mail providers use. Each one quietly sends invoices and quotes to spam.
Mail servers on a blocklist
The domain's mail servers checked against public blocklists such as Spamhaus and Barracuda. A listed server means replies to customers are being refused or filtered today.
Evidence, not a scare
Anyone can send an invoice as this business today. Here is the record that stops it.
An owner does not need to understand DMARC to understand that a stranger can send email in their name. The report says that in plain words, shows the DNS record that proves it, and gives the record that fixes it, ready for whoever manages the domain.
Read the SPF, DKIM and DMARC guide- Copy-ready DNS records
- The SPF and DMARC records to publish, written for the domain in front of you.
- Grade, then detail
- One deliverability grade an owner can read, and the record-by-record detail your technician needs.
- Your name on it
- White-label reports on Pro and above, so the finding arrives from your consultancy.
What every audit reads from the domain
All of it from public DNS and the mail servers' public addresses. Nothing is sent and nothing is logged in to.
SPF
Whether a record exists, and whether it ends in a hard fail, a soft fail or a neutral all that protects nothing.
DKIM
A key looked for on the selectors used by Google Workspace, Microsoft 365 and the common sending services.
DMARC
The policy (none, quarantine or reject) and whether aggregate reports are sent anywhere anyone reads them.
BIMI and blocklists
Whether a brand logo record exists, and whether any mail server is listed on a public blocklist.
Questions from deliverability consultants
Does SiteAssay send email to test a domain?
No. Every check is a DNS lookup anyone can make: the SPF, DKIM, DMARC and BIMI records, the MX hosts and their addresses, and the public blocklist zones. Nothing is sent to the business or from it.
Can it find businesses that need DMARC, not just check one domain?
Yes. Search a trade and a city, and every business found with a website is audited and ranked by opportunity. Each one's page lists its email findings next to the rest, so you can see which have no DMARC at all before you call.
Is the free checker the same check as the full audit?
It reads the same records. The full audit adds the blocklist check, puts the email finding next to the rest of the site, and produces a report you can brand and send.
Find your next DMARC client this week
Check any domain free, buy a single full report for $19, or start a 7-day free trial with no card.