Tools
Domain security scan.
Run the main checks at once: DMARC, SPF, DKIM, MTA-STS, BIMI and DNS health for any domain.
Six live checks: mail provider and DNS health, DMARC, SPF, DKIM, MTA-STS, and BIMI.
Mail provider & DNS
Waiting…
How to read your results
Traffic lights. Green is a pass, amber is worth a look, and red needs fixing. Each check runs live against your domain's DNS.
What to fix first. Start with DMARC and SPF, which stop spoofing. Then DKIM to strengthen DMARC, then MTA-STS to protect mail in transit, then BIMI for your branded logo once DMARC is enforced. DNSSEC protects the records themselves from tampering.
Want to go deeper on any one check? The dedicated DMARC, SPF, and DKIM checkers break each one down, and DMARC in plain English explains how they fit together.
Frequently asked questions
- What does the domain security scan check?
- It runs every email-security check at once for a domain: DMARC, SPF, DKIM, MTA-STS, BIMI, and DNSSEC, and gives a single traffic-light verdict you can act on.
- How do I check my domain's email security?
- Enter your domain and run the scan. dmarcula checks each record live and shows a pass, warning, or fail for each, so you can see what to fix first.
- Is the domain security scan free?
- Yes, and there is no signup. You can scan any domain.
- What should I fix first?
- Start with DMARC and SPF, which stop spoofing. DKIM strengthens DMARC, MTA-STS protects mail in transit, and BIMI is the branded-logo finishing touch once DMARC is enforced.
This check is a snapshot. dmarcula watches your domain around the clock, reads the DMARC reports for you, and emails you when something changes. Free, no credit card.