Free Tool

Email Security Scanner

Instantly analyze any domain's email security configuration. Check SPF, DKIM, DMARC, MX records, and more.

We only perform passive DNS lookups. No emails are sent or data stored.

10+Security Checks

6Categories

<15sScan Time

3/dayFree Scans

Daily Scan Limit Reached

You've used your 3 free scans today. Upgrade to ASM for unlimited scanning.

View ASM Plans Book a Demo

Initializing scan...

0/100

Calculating...

This scan only scratches the surface

Get Continuous Attack Surface Monitoring

This scanner checks basic email authentication records. Our ASM platform provides continuous monitoring, subdomain discovery, AI-powered vulnerability analysis, and automated alerting.

View ASM Plans Book a Consultation

From $29.99/mo AI-powered 14-day free trial

What We Check

Comprehensive Email Security Analysis

Our scanner checks for the most critical email authentication and security configurations.

SPF Records

Sender Policy Framework validation, mechanism analysis, lookup limits, and policy strictness checks.

DMARC Policy

Domain-based Message Authentication policy enforcement, reporting configuration, and alignment checks.

DKIM Signing

DomainKeys Identified Mail selector discovery across 12 common selectors for signature verification.

MX Records

Mail exchanger record validation, priority analysis, and redundancy checks for mail delivery.

MTA-STS

Mail Transfer Agent Strict Transport Security policy and TLS reporting configuration analysis.

BIMI

Brand Indicators for Message Identification record, logo URL, and Verified Mark Certificate checks.

How It Works

Scan in 3 Simple Steps

Get actionable email security insights in seconds.

Enter Your Domain

Type in any domain name - we'll query all the relevant DNS records automatically.

We Analyze

Our scanner checks 10+ email security configurations across 6 categories in under 15 seconds.

Get Your Report

Receive a detailed breakdown with a security score, findings, and actionable recommendations.

Frequently Asked Questions

Is this email scanner really free?

Yes, completely free with no sign-up required. You get 3 scans per day. For continuous monitoring and deeper analysis, check out our ASM platform.

What is SPF, DKIM, and DMARC?

SPF specifies which servers can send email for your domain. DKIM adds a digital signature to verify emails haven't been tampered with. DMARC tells receiving servers what to do when SPF or DKIM checks fail. Together, they protect against email spoofing and phishing.

What does my email security score mean?

Your score (0-100) reflects how well your domain's email authentication is configured. 80+ means strong protection, 50-79 means improvements needed, and below 50 indicates vulnerability to email spoofing.

Why is DMARC important?

Without DMARC, anyone can send emails that appear to come from your domain. DMARC with a "reject" policy tells email providers to block unauthorized emails, protecting your brand and preventing fraud.

Do you store my scan results?

No. Results are generated in real-time by querying public DNS records and delivered directly to your browser. We do not store or share any data.

What are MTA-STS and BIMI?

MTA-STS ensures emails sent to your domain are always encrypted in transit. BIMI allows your brand logo to appear next to your emails in supported clients like Gmail, increasing trust and visibility.

Stop Spoofing. Start Monitoring.

91% of cyberattacks begin with a phishing email. Our ASM platform monitors your email security posture 24/7 with automated alerting.

Start Free Trial Book Consultation

Personal $29.99/mo Pro $299.99/mo Company $499.99/mo