Email & DNS Security Audit (SPF, DMARC, DKIM, MTA-STS)
Pricing
from $3.50 / 1,000 domain auditeds
Email & DNS Security Audit (SPF, DMARC, DKIM, MTA-STS)
Check any domain's email security in bulk: SPF, DMARC policy, DKIM, MTA-STS, TLS-RPT, BIMI and CAA. Spoofing risk, a score out of 100 and step-by-step fixes.
Pricing
from $3.50 / 1,000 domain auditeds
Rating
0.0
(0)
Developer
Pagecraft Tools
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
a day ago
Last modified
Categories
Share
Email & DNS Security Audit: SPF, DMARC, DKIM, MTA-STS Checker
Check how well any domain is protected against email spoofing and phishing, in bulk. Get a score out of 100, a spoofing risk rating and step-by-step fixes.
What it checks
- 📮 MX records (can the domain receive email?)
- ✅ SPF: present, only one record, under the 10-lookup limit, ending in ~all or -all
- 🛡️ DMARC: present, policy (none, quarantine or reject), reporting addresses, subdomain policy
- 🔑 DKIM: keys on 20 common selectors (Google, Microsoft 365, Mailchimp, Zoho, Proton and more)
- 🔒 MTA-STS (policy file read and mode reported) and TLS-RPT
- 🏷️ BIMI and CAA
Who it's for
IT and security teams checking their own domains, MSPs auditing clients, deliverability consultants, and sales teams building lead lists of companies with weak email security.
Input
| Field | What to enter |
|---|---|
| Domains or URLs | acme.com, https://www.acme.com or someone@acme.com; one per line, duplicates removed |
Output
One row per domain:
Scoring: DMARC (present 20, enforced 15, reports 5), SPF (present 15, single record 5, under 10 lookups 5, strict ending 5), MX 10, DKIM 10, MTA-STS 4, TLS-RPT 2, BIMI 2, CAA 2. Grade A is 90 or more, B 75, C 55, D 35, below that E. Spoofing risk is high with no DMARC or p=none, medium with quarantine and low with reject.
Pricing
Pay per domain audited. Domains that do not exist or cannot be resolved cost the lower failed fee.
| Event | When it is charged | Price per 1,000 (Free / Bronze / Silver / Gold plan) |
|---|---|---|
| Domain audited | Each domain audited. | $5 / $4.50 / $4 / $3.50 |
| Domain failed | A domain that does not exist or could not be resolved. | $1.50 on every plan |
Set Maximum cost per run to cap your spend: the run stops cleanly at your limit.
Notes
DKIM can only be found on known selectors; a custom selector may show as missing even when DKIM is set up. Input can be domains, URLs or email addresses.
