Free Domain Security Scan
See Your Email Authentication Grade in Seconds
Check whether your domain is properly protected against email spoofing and phishing. Enter your domain below for an instant, plain-English grade covering DMARC, SPF, DKIM, MTA-STS, TLS-RPT and BIMI, no sign-up required.
Want to receive a full detailed report?
Why This Matters
Most businesses have no idea whether their domain can be spoofed by criminals sending phishing emails that appear to come from them. Email authentication records fix this, but they are easy to get wrong, and even easier to leave misconfigured without ever knowing.
This scan checks the same six protocols our fully managed email authentication platform manages on an ongoing basis, giving you an honest, immediate picture of where your domain stands today.
Six Protocols Checked
DMARC, SPF, DKIM, MTA-STS, TLS-RPT and BIMI are all checked in one scan, rather than piecing together results from several separate tools.
A Grade You Can Actually Understand
Results are presented as a plain grade and a prioritised list of what to fix, not a wall of raw DNS output only an engineer could interpret.
No Sign-Up Required
Run the scan and see your results immediately. Nothing to install, and no account needed to check your own domain.
Found a Problem? We Can Fix It, and Keep It Fixed
A scan tells you where you stand today, but email authentication is not a one-off job. Sending services change, keys need rotating and policies need reviewing over time.
AOITSec is our fully managed platform that takes care of all of this permanently. You add one DNS record, once, and our team manages every policy change, key rotation and report from then on.
Frequently Asked Questions
Yes, this scan is free to use and does not require creating an account.
Scan results are stored temporarily so you can revisit your report by its link, and are automatically deleted after 60 days.
Get in touch with us. We can review your results properly and, if you would like, take over managing your email authentication permanently through our AOITSec platform.
The scan only checks publicly available DNS records, the same information anyone can already look up, so you can use it to check any domain. Scans are rate limited to prevent abuse.
Most businesses do not need to. The scan automatically checks common selectors used by major email and marketing platforms. The advanced options field is only needed if your business uses a DKIM selector name that is not on that common list.
It means your domain has strong protection against being spoofed by phishing emails, which is a major and common risk. Email security also depends on other factors, such as staff awareness and how your inbox itself is protected.
Want This Managed for You, Permanently?
Get in touch and we will assess your domain properly and take email authentication off your hands for good.