Score by area
📚 Understand your results
New to SPF, DKIM or DMARC? These plain-English guides explain what your report is telling you and how to fix it.
📬 Get an email if this changes
We'll re-check this domain every morning and email you only when something gets worse or gets fixed: an expiring certificate or domain, a removed DMARC record, a new risky subdomain and more. Free.
Your email is stored in Azure (Australia) only for these alerts. One-click unsubscribe in every email. Privacy policy.
Want these fixed for you?
Global SOC is a security-first studio in Glen Waverley, Melbourne. We can harden your DNS and email in a day.
📨 Test your real email deliverability
DNS records show what should happen. This checks what actually happens: send one email from the mailbox you want to test, and we'll show whether SPF, DKIM and DMARC pass and align on your live email — the gap that record checks miss.
What the audit looks at
📧 Email spoofing
SPF, DMARC and DKIM decide whether criminals can send email that looks like it came from you. We check that each exists, is valid, and actually enforces.
🔏 Integrity & certificates
DNSSEC stops forged DNS answers. CAA limits which certificate authorities can issue HTTPS certificates for your domain.
🧩 Takeover & exposure
Dangling CNAMEs, dead name servers, internal IPs, wildcards and leftover verification records are common footholds for attackers.
🧭 Resilience
Name server count, network diversity and SOA timers determine whether your domain stays up when one server or provider fails.
🏷️ Registration
An expiring domain or a missing transfer lock can lose you your website and email overnight. We read public RDAP data where the registry publishes it.
🛰️ Server-side tests
Our Azure backend checks your HTTPS certificate, outdated TLS, security headers, HSTS, security.txt and your MTA-STS policy file, and asks each name server directly about zone transfers, open recursion and version disclosure. These are light, standard checks, not a penetration test.