Keep your email trusted and deliverable.
Monitor email authentication and security across your domains.
Protect your domain from spoofing and phishing with continuous monitoring of email authentication and trust controls.
What it finds
SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI for every domain, and the exact reason a mailbox provider would reject your mail or let someone spoof it.
What you get
The record to publish, written out, and a second look after you publish it. Your DMARC reports read for you on Pro and up.
What it is not
We do not send mail for you and we do not change your DNS. You stay in control of every record.
See where your email stands
Get a clear view of the authentication and security controls protecting your domain.
SPF
Verify that authorised mail senders are correctly defined and identify configuration issues that could affect delivery or allow abuse.
DKIM
Check that messages can be authenticated correctly and that your signing configuration remains valid.
DMARC
See whether your domain is protected against spoofing and whether your policy provides the level of enforcement you expect.
MTA-STS & TLS-RPT
Monitor controls that help protect inbound mail transport and provide visibility into TLS failures.
BIMI & VMC
Check readiness for trusted brand indicators and the certificate requirements behind them.
Brand indicators
BIMI and the Verified Mark Certificate: what we check
BIMI puts your logo next to your emails in Gmail, Apple Mail and others. It only works when four things are right at the same time. We check all four and tell you which one is missing.
1. DMARC at enforcement
Mailbox providers show a logo only for domains whose DMARC policy is quarantine or reject, applied to 100% of mail. Without that, nothing else matters.
2. The BIMI record
A TXT record at default._bimi.yourdomain that points at the logo and, for most providers, at the certificate. We read it and show you the exact record to publish.
3. The logo file
The logo must be an SVG in the Tiny PS profile: square, with a title, no scripts, no external links, under 32 KB. We fetch it and check each rule.
4. The certificate
A Verified Mark Certificate ties the logo to your domain. We check its purpose, its validity dates, the domain it names, the mark type and when it expires. On Pro and up, we check it again every day and alert you 30 days before it expires.
We check and explain. We do not sell certificates and we do not draw logos. A BIMI record is worth 4 of the 100 points in your email score: 2 when it names a logo, 2 when it names a certificate. A broken logo or an expiring certificate does not change the score, but we report it.
Fix a named problem
Step-by-step guides with the math, the RFC sections and a free check at the end.
Catch email trust issues early
Instead of discovering a broken record or weakened policy after delivery is affected, get clear findings and practical remediation guidance.