Free email security check
Can criminals send email pretending to be you?
Enter your business domain. We check its public email security records in seconds and explain the results in plain English. Nothing is installed and we never access your systems.
Checks SPF, DKIM, DMARC, MTA-STS and TLS reporting.
What is email spoofing?
Email has no built-in proof of who sent it. Unless your domain publishes a DMARC policy set to quarantine or reject, anyone can send a message that shows your address in the From line.
Why it matters
Fake invoices, changed bank details and phishing sent in your name reach your customers and suppliers, and can land your genuine email in junk.
What this check can't see
It reads public DNS only. Lookalike domains and hacked mailboxes need a different review: our Business Premium health check and breach investigation cover those.