Pricing

from $2.50 / 1,000 domain auditeds

Try for free

Go to Apify Store

Email Security Check: SPF, DKIM, DMARC, MX

Try for free

Audit SPF (with its DNS lookup count), DMARC, DKIM key sizes, MTA-STS, TLS-RPT, BIMI and MX for a list of domains. Get a grade from A to F, issues with exact fixes, and a Google/Yahoo bulk sender check. Optional monitoring with change alerts.

Pricing

from $2.50 / 1,000 domain auditeds

Rating

0.0

(0)

Developer

Plainsource

Actor stats

Bookmarked

Total users

Monthly active users

a day ago

Last modified

Categories

Developer tools

Automation

Domains

domains

Required

Domains to audit, one per line, such as yourcompany.com or a sending subdomain like mail.yourcompany.com. URLs and email addresses are accepted and reduced to the domain; a leading www. is dropped. Up to 5,000 per run.

Type:array

Extra DKIM selectors

dkimSelectors

Optional

DKIM keys can only be found by name. 52 common selectors (google, selector1, selector2, k1, s1, default and others) are always checked. Add your own here: it is the s= value in the DKIM-Signature header of a message you sent. Up to 20.

Type:array

Check DNSSEC

checkDnssec

Optional

Ask Google Public DNS (dns.google) whether the domain's answers are DNSSEC-validated and whether a DS record exists. Informational: it does not change the grade.

Type:boolean

Default:true

Monitoring list name

stateKey

Optional

Turn on monitoring mode: each domain's result is saved under this name, and later runs with the same name report what changed (grade, SPF, DMARC, DKIM keys, MX, MTA-STS, new and resolved issues). Leave empty for a one-off audit. Use a different name per client or list.

Type:string

Webhook URL

webhookUrl

Optional

Optional, monitoring mode only. An https:// URL that receives a POST when at least one domain changed: a Slack or Discord incoming webhook, or any endpoint that accepts JSON.

Type:string

Webhook format

webhookFormat

Optional

slack and discord send a short text message; json sends the list of changes.

Type:string

Default:json

Options:

jsonslackdiscord

Respect robots.txt

respectRobotsTxt

Optional

Applies to the one web request this Actor makes: the MTA-STS policy file at https://mta-sts.<domain>/.well-known/mta-sts.txt. Everything else is DNS.

Type:boolean

Default:true

Domains checked at once

maxConcurrency

Optional

How many domains are audited in parallel. Each domain takes about 80 DNS queries to public resolvers, so higher values can hit their rate limits.

Type:integer

Minimum:1

Maximum:20

Default:5

Request timeout

timeoutSecs

Optional

How long to wait for the MTA-STS policy file. DNS queries have their own limit of a few seconds.

Type:integer

Minimum:5

Maximum:60

Default:15

DMARC, SPF & DKIM Validator

andok/dmarc-spf-dkim-validator

Validate email authentication DNS records to prevent spoofing and ensure high email deliverability for your domains.

Andok

DMARC Checker

onescales/dmarc-checker

Simple DMARC record lookup tool. Check email security configuration for multiple domains in a single run.

One Scales

5.0

(2)

Bulk Email Deliverability Checker - SPF, DKIM, DMARC, MX

codeblix/email-deliverability-checker

Audit thousands of domains for email authentication, DNS issues, and deliverability risk. Checks SPF, DKIM, DMARC, MX, DNSSEC, MTA-STS, TLS-RPT, BIMI. No login, no proxy, no API keys needed.

Jayesh Choolun

DMARC & Email Security Checker

taroyamada/dns-dmarc-security-checker

Validate email-domain infrastructure. No API key / no login. Open Input → leave defaults → Start (1 domain ≈ USD 0.008 total): https://console.apify.com/actors/PUumFXvaFfJrkaMF3/input

naoki anzai

Email Domain Security Auditor — $0.50/1K

scrapesignal_labs/email-domain-security-auditor

Audit MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, BIMI, DNS, provider, issues, and readiness score for domain lists.

ScrapeSignal Labs

Bulk Email Validator — MX, Format & Disposable Check

maged120/email-validator

Validate email addresses in bulk. Checks format validity, domain existence, MX record resolution, and disposable email domain detection — clean your mailing list before sending.

Maged

OpenOSINT Domain Recon — Email Security & Attack Surface Check

complete_analogy/openosint-domain-recon

Check any domain's SPF, DMARC, and DKIM email security — graded A-F, plus RDAP domain lookup. For vendor due diligence and phishing prevention.

Tommaso Bertocchi

Email DMARC Auditor — SPF/DKIM/DMARC Bulk Check

nexgendata/email-dmarc-auditor

Check email compliance and run domain audits in bulk: parses SPF, DMARC and DKIM records, returns a deliverability score (0-100) and step-by-step remediation actions per domain.

NexGenData

Email Security & Deliverability Analyzer — SPF DKIM DMARC

perryay/email-security-analyzer

Enterprise email domain security audit: SPF/DKIM/DMARC/BIMI/MTA-STS DNS validation, 50+ blacklist scans, MX record analysis with IP resolution, deliverability scoring (0-100), and detailed remediation advice.