Free Tool

Domain Security Report

Get a comprehensive email security audit. Checks blacklists, SPF, DKIM, DMARC, spoofing vulnerability, and mail server configuration in one report.

Free comprehensive audit — no signup required

What This Report Covers

This domain security report combines multiple checks into a single comprehensive audit of your email infrastructure. It evaluates both your DNS-based authentication records and your vulnerability to email spoofing.

The report checks your SPF record to verify which servers are authorized to send email for your domain, DKIM keys to ensure email integrity and authentication, and DMARC policy to determine how receiving servers handle authentication failures.

It also scans your domain's IP address against 60 blacklists to identify reputation issues, verifies your MX records are properly configured, and performs a spoofing vulnerability assessment that evaluates how well your domain is protected against impersonation attacks.

For deeper analysis of individual components, use our dedicated tools: DNS Lookup, Mail Server Fingerprint, Subdomain Finder, and Catch-All Detector.

Frequently Asked Questions

What does the domain security report check?
This report runs a comprehensive audit covering blacklist status (across 60 blacklists), SPF record validation, DKIM key verification, DMARC policy analysis, MX record configuration, and email spoofing vulnerability assessment. It combines the results of our homepage check with our spoofing analysis tool for a complete picture.
How is the security score calculated?
The score is calculated based on the presence and correctness of email authentication records (SPF, DKIM, DMARC), blacklist status, MX record configuration, and spoofing risk level. Each component contributes to the overall score — a perfect 100 means all authentication is properly configured, no blacklists are triggered, and the domain is protected against spoofing.
What should I do if my score is low?
Start by addressing the most critical issues first: if you're on a blacklist, request delisting. If SPF is missing, add an SPF TXT record. If DMARC is missing or set to 'none', configure it with at least p=quarantine. Each section of the report includes specific details about what's wrong and how to fix it. Our paid plans offer continuous monitoring to alert you if issues recur.
How often should I run a security audit?
We recommend running a full domain security audit at least monthly, or whenever you make DNS changes, switch email providers, or add new sending services. With our paid monitoring plans, these checks run automatically on a schedule with instant alerts when issues are detected.
Is this report really free?
Yes, this report is completely free with no signup required. We offer it as a public tool to help improve email security across the internet. For continuous monitoring, automated alerts, and historical tracking, our paid plans start at $14/month.

Need continuous monitoring?

Get automatic alerts when your security posture changes. Monitor blacklists, SPF, DKIM, DMARC, and more 24/7.

Start Monitoring Free