[ Troubleshooting & reporting ]
Diagnostics and working resources
Checkers, generators, checklists and the glossary your team reaches for every day.
27 guides
[ Core guides ]
[ All guides ]
Article
5 Fun Facts About Email: Discover Its Untold Story
Dive into the fascinating world of email with these 5 fun facts and understand why its security matters to everyone.
Article
Is Your Email Safe? Take Our Quiz to Find Out!
Test your email's security with our interactive quiz and learn essential tips to keep your information protected.
Article
DMARC Record Creator: The Easy Way to Protect Your Email Domain
Protect your email domain with ease using our DMARC Record Creator. Say goodbye to email spoofing and phishing attempts once and for all!
Article
How to Choose the Right SPF Tester for Your Business?
Choosing the right SPF tester for your business is crucial to ensure accurate results. This guide will help you make an informed decision.
Guide
BIMI checker: separate DNS, logo, certificate and receiver eligibility
Separate BIMI DNS, SVG, HTTPS, mark evidence and receiver eligibility rather than promising display from one successful check.
Guide
BIMI record builder: avoid promising logo display
Annotate BIMI record output with selector, asset, evidence and receiver prerequisites while keeping publication and display claims separate.
Guide
BIMI SVG validator: explain each failed requirement
Require SVG validation findings to identify the exact asset, failed rule, severity and remediation without confusing appearance with profile compliance.
Guide
DANE checker: present DNSSEC and TLSA evidence separately
Require separate evidence for DNSSEC validation, TLSA usability and the observed SMTP certificate association.
Guide
DKIM checker guide: start with the actual selector
Plan a DKIM check from the actual signature and selector, keeping public-key availability, message verification and DMARC alignment separate.
Guide
DMARC checker: report DNS evidence and its limits
Require DMARC checker outputs to retain DNS provenance, current discovery behavior and the limits of publication-only evidence.
Guide
DMARC record generator: explain the policy decisions behind the output
Explain DMARC generator output through explicit policy choices, reporting authorization, current syntax and an approved exact change plan.
Guide
DMARC XML analyser guide: bound untrusted input
Plan a DMARC aggregate-report importer with bounded decompression, hardened XML processing, schema-aware interpretation and retained provenance.
Guide
DNS TXT inspector: show record boundaries and authoritative answers
Require a TXT inspector to retain resource-record boundaries, string structure, exact query context and authoritative-versus-recursive evidence.
Guide
Domain health assessment guide for authentication
Prioritize email authentication findings using scoped DNS, SPF, DKIM and DMARC evidence. Separate confirmed failures from unknowns; this guide is not a scanner.
Guide
Domain registration and RDAP evidence: distinguish ownership clues from sender authorisation
Interpret RDAP registration responses as timestamped clues with explicit privacy, role and attribution limits, not sender authorization.
Guide
Email authentication glossary with stable references
Use clear definitions for email identities, alignment, reporting and DNS, with stable local anchors and primary sources. Operational tool evidence stays open.
Guide
Email authentication standards and source library
Find DMARC, SPF, DKIM, SMTP and DNS references with document status, scope and registry links. Keep protocol publication separate from implementation proof.
Guide
Header analyser guide: identify trusted results
Design a header analysis that preserves raw structure and identifies who supplied each identity and authentication claim before assigning trust.
Guide
MTA-STS checker guide: trace the full policy chain
Plan an MTA-STS check that separates DNS discovery, authenticated policy retrieval, MX scope, SMTP validation and sender policy caching.
Guide
MX and reverse DNS checks for mail routing
Interpret MX and reverse DNS separating inbound routes, outbound IPs, reputation or authentication. Includes a fictional fixture, not a working live checker.
Guide
SPF checker: show the evaluated dependency path
Require SPF checker evidence to show evaluation inputs, ordered dependencies, logical limits and error handling rather than a shallow lookup count.
Guide
SPF record builder: preserve explicit sender ownership
Build proposed SPF policies from approved sender ownership, current authorization evidence and explicit maintenance responsibilities.
Guide
TLS-RPT checker guide: verify request and destination
Plan TLS-RPT checks for discovery, report destinations, SMTP signature rules and safe JSON interpretation without confusing reporting with enforcement.
Related free tools
Enterprise provenance
Why top financial institutions and governments retired their email security dashboards.
Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.
EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.
SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption
[ More in Troubleshooting & reporting ]