Free Tools
Email Security Toolkit
17 free tools for email security testing, deliverability diagnostics, and infrastructure reconnaissance. No signup required.
Email Authentication
Validate your domain's email authentication records
Email Blacklist Checker
Check your domain against 60 email blacklists. Get your deliverability score and remediation steps.
SPF Record Checker
Validate SPF syntax, DNS lookup limits, and missing include directives.
DKIM Record Checker
Verify DKIM signing configuration across 23 common selectors.
DMARC Record Checker
Analyze DMARC policy and get recommendations to strengthen enforcement.
BIMI Record Checker
Verify your brand logo and VMC certificate for inbox logo display.
Transport Security
Test email encryption and transport layer protection
MTA-STS Checker
Verify MTA-STS DNS records and policy files for enforced TLS delivery.
TLS-RPT Checker
Check TLS reporting configuration to receive delivery failure reports.
DANE/TLSA Checker
Verify DANE/TLSA records for DNS-based authenticated TLS on your mail server.
Reverse DNS Checker
Validate PTR records and Forward-Confirmed reverse DNS (FCrDNS).
Pen Test & Security
Active security testing tools for email infrastructure
Email Spoofing Test
Test if your domain is vulnerable to email spoofing. Analyzes SPF, DKIM, and DMARC gaps.
SMTP Security Scanner
Test STARTTLS, open relay, VRFY/EXPN enumeration, and SMTP vulnerabilities.
Email Header Analyzer
Parse headers, trace delivery path, verify authentication, and detect anomalies.
Mail Server Fingerprint
Identify SMTP software, extensions, auth mechanisms, and server configuration.
DNS & Reconnaissance
DNS intelligence and domain discovery tools
DNS Lookup
Query any DNS record type: A, AAAA, MX, TXT, NS, CNAME, SOA, PTR.
Subdomain Finder
Enumerate subdomains to discover services and map your attack surface.
Catch-All Detector
Detect if a domain accepts email for any address (catch-all configuration).
Domain Security Report
Complete email security audit — all checks combined in one comprehensive report.
Need continuous monitoring?
Go beyond one-time checks. Monitor all your domains 24/7 with automated alerts and delisting playbooks.
Start Monitoring Free