Skip to content

Free tool

Will your email reach the inbox?

SPF says who may send as you. DKIM signs what you send. DMARC tells inbox providers what to do when the first two fail, and without it anyone can send mail as your domain and your own mail is treated with suspicion. We read the three DNS records and report what they say.

Free, no account, and read-only

What it actually does

Three steps, and none of them touch anything on the address you give it. Worth reading before you point a scanner at your own production site.

  1. Step 1

    Resolve the domain

    Nothing is sent and nothing is connected to. The whole check is DNS, which is public by design.

  2. Step 2

    Read the three records

    SPF, DKIM and DMARC are looked up and parsed rather than pattern-matched, so a syntactically broken record reads as broken.

  3. Step 3

    Report what they say

    What each record allows today, and what an inbox provider does with a message that fails it.

Read-only. Nothing is signed in to, submitted or changed on the address you enter. See the methodology for how each result is graded.

The rest of it

This is one check of 48.

Email authentication is one section. The full scan also covers security, performance, SEO, AI visibility and conversion.

Run the full free audit

Other free checks

Exposed API keys Run it Source maps Run it Security headers Run it Supabase RLS Run it AI robots.txt & AEO Run it

Run your first audit today

Start on the free plan, with enough searches to cover a city and enough audits to judge a shortlist. No card, and it does not expire.

Start free Read the docs