Email security checks
Inspect email authentication settings with clear limits on what a DNS check can prove.
Available checks
Inspect MX records, identify an SPF record and review its basic policy, and inspect DMARC policy tags. Query a known DKIM selector using TXT or CNAME. DKIM selectors cannot all be discovered automatically.
Technical boundaries
The checker does not send test emails, evaluate real SPF/DKIM alignment or guarantee inbox delivery. SPF includes, record ordering, IP ranges and DNS lookup budgets are not fully evaluated. A published DMARC policy does not by itself prevent every spoofing attempt.
Planned monitoring
Recurring email-configuration checks, change tracking and notifications are planned.