[ Free tool · Email Authentication ]
Full Domain Health Scan
Run every email security check at once and get one score.
[ About this tool ]
This domain health scan runs DMARC, SPF, DKIM, MX, MTA-STS, TLS-RPT, DNSSEC and BIMI checks together and produces one score.
How to read the results
- ›Fix critical items (missing DMARC, SPF errors) first.
- ›Enforced DMARC and MTA-STS lift the score most.
Frequently asked questions
How do I check my email domain health?
Enter your domain above for a full authentication and security report in seconds.
Learn more in our guide: Email Security: Stop Spoofing, Phishing and BEC
Enterprise provenance
Why top financial institutions and governments retired their email security dashboards.
Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.
EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.
SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption
[ More tools ]
NameServer Checker
List a domain's nameservers and catch lame or single-point-of-failure DNS.
CNAME Lookup
Follow a CNAME chain and catch a dangling target before someone else does.
CAA Record Checker
See which certificate authorities may issue TLS certs for you.
Lookalike Domain Finder
Find typo and homoglyph domains that could impersonate you.
DMARC Checker
Look up and explain any domain's live DMARC record.
SPF Checker
Validate your SPF record and check the 10-lookup limit.