Complete email security checker
Run MX, SPF, DMARC, DKIM and DNSSEC together, with a checklist that never counts an unavailable check as a failure.
1 · Input
DKIM is published per-selector - without one, DKIM is shown as not configured rather than checked.
Related Tools
More tools in the same category
Other Tools
Popular tools from across A2Z
What this combines
One page pulling together five checks this site already runs individually - MX, SPF, DMARC, DKIM (when you supply a selector) and DNSSEC - so the overall picture of a domain's email security does not require five separate lookups. Each check reuses the exact same service as its dedicated page; nothing is re-implemented here.
Why the score never punishes an unavailable check
DKIM cannot be checked without knowing its selector, and DNSSEC not being deployed is common and not itself an email-security failure. Both are shown as not configured rather than counted against the score - the summary is "X of Y checks that actually ran passed," where Y excludes anything that could not honestly be evaluated.
What "pass" means for each check
- MX - at least one mail server is configured.
- SPF - a valid record exists with no detected warnings.
- DMARC - a record exists with an enforcing policy (reject counts as pass; none/quarantine are shown as warnings, since they are valid but partial states).
- DKIM - only checked if you provide a selector; a record is found at it.
- DNSSEC - the domain is signed and the chain validates.
What this does not check yet
BIMI, MTA-STS and TLS-RPT are not part of this aggregate - see the site's other email-security tools as they are added.
Rate this tool
Was this tool useful? Your feedback helps us improve it.