Free tool
Could a stranger send email as your business?
Type your domain and get an instant read of the protection records it publishes to the world. Plain English results, nothing to sign up for, and the lookup never leaves your browser.
This is the one-minute surface check: it reads only what your domain publishes in public DNS. It cannot see your signing keys (DKIM) or whether your real mail passes these rules. The full free audit covers that layer.
What the instant check can and cannot tell you
What does this instant check look at?
It reads the records your domain publishes publicly in DNS: your spoofing protection policy (DMARC), your allowed senders list (SPF), and whether the domain routes mail (MX). The lookup runs from your browser against Cloudflare DNS; we never see or store the domains you check.
Why does the full audit find things this check cannot?
Signing keys (DKIM) cannot be reliably checked from the outside without knowing your mail provider's selector, and no instant tool can tell whether your real mail actually passes the published rules, or what other services are quietly sending as you. The full audit verifies those, then hands you an exact fix plan in plain English.
My domain shows as spoofable. How urgent is it?
It means a stranger can send email today that uses your exact address, and receiving servers have no instruction to stop it. Fake invoices and quote follow-ups are the common abuse. The fix is a small DNS change project, not a rebuild. In our audit of 698 Southwest Michigan businesses, 84.7% of mail-capable domains were in a spoofable state, so you are in common company, but it is worth fixing this month rather than someday.
The free audit finishes what the instant check starts
One business day, no cost, no obligation. You get a short plain-English report on your domain's full email security posture and the exact changes that would close the gaps.