Can someone send email pretending to be you?
Fake invoices and payment requests work because they look like they came from a business the customer already trusts. Three public DNS records decide whether mail servers believe a message is really from you. Enter your domain and we'll check them, grade the result, and email you the report as a PDF.
Scan my domain
Takes a minute. The report arrives within a few minutes at your business email.
What's in the report
- ✓A grade from A to FOne letter for how well your domain is protected against forged email.
- ✓Each record, in plain languageWhat SPF, DKIM and DMARC are set to on your domain, and what that means for a fake email.
- ✓The exact next stepsWhich records to add or change, in the order to do them, so legitimate mail keeps flowing.
- ✓Your mail setup at a glanceMail provider, web host, DNS host and registrar, so whoever makes the changes knows where to go.
Three records and one answer
Every mail server on the internet reads these before deciding whether a message from your domain is real.
SPF: who may send as you
A list of the services allowed to send mail for your domain, such as Google Workspace, Microsoft 365 or your invoicing tool. Mail from anywhere else should fail.
DKIM: a signature on every message
A cryptographic signature that proves a message really came from your mail system and wasn't changed on the way.
DMARC: what to do with fakes
Your instruction to every receiving mail server: deliver forged mail, send it to spam, or reject it outright.
Spoofability: the bottom line
Putting the three together: can someone send an email that looks like it came from your business, and will it reach the inbox?
Before you scan
Is it really free?
Yes. The scan and the report cost nothing, and you are not signing up for anything. If the report shows a problem, it lists the fixes, and you can have whoever manages your email make them.
Do you need access to my email?
No. Everything in the report comes from public DNS records, the same ones every mail server on the internet reads. We never log in to, send to, or test your mailboxes.
Why does my email have to match the domain?
Because the report describes how well your domain is protected, it only goes to someone who works there. That stops anyone from requesting a scan of a business they don't belong to and having us send them the results.
What do the grades mean?
A means forged mail claiming to be from you is blocked. C means some protection is in place but forged mail can still get through. D and F mean anyone can send email that looks like it came from your business. The report explains which records cause the grade and what to change.
Rather talk it through?
We set up and manage email for Pittsburgh businesses on Microsoft 365 and Google Workspace as part of our cloud solutions. Bring your report to a call and we'll walk through it with you.