Stop attackers from spoofing your domain. These tools grade your email authentication and help you build correct SPF and DMARC records. They query public DNS resolvers for the domain you enter to read its records. Nothing you enter is stored.
Check where your domain stands today, then generate the records to close the gaps.
Grade a domain's email authentication from A to F, with plain-English explanations and fixes for every gap.
Validate an SPF or DMARC record for errors and weaknesses, or generate a correct one with DNS instructions.
Start with the Email Security Analyzer to see how your domain's email authentication is set up today and what it scores. Then use the SPF and DMARC Generator and Validator to build or correct your records, publish them, and run the analyzer again to confirm the fix.
Without it, anyone can send email that appears to come from your domain. Attackers use that to trick your customers, partners, and staff into paying fake invoices or handing over passwords. Correct SPF, DKIM, and DMARC records also help your legitimate email reach the inbox.
It stops attackers from spoofing your exact domain, but not look-alike domains or phishing sent from a compromised account. People remain the last line of defense, and a social engineering assessment measures how your staff respond to realistic phishing.
