The Lab
Run a single test.
The full checkup examines every record at once. The Lab gives each one its own room: what it does, what breaks when it is wrong, and the exact fix. Every test reads your live DNS and cites the specification it judges you against.
Authentication 4
SPF Test
Full chain walk with the exact 10-lookup count, plus the void lookups nobody else checks.
RFC 7208
DMARC Test
Tree-walk discovery, inheritance, test mode and the policy receivers really apply.
RFC 9989
DKIM Test
Selector discovery and the real key length, read from the published key.
RFC 6376
Spoofability
Can somebody send as you right now? One verdict, no hedging.
the scary one
Infrastructure 4
MX Lookup
Mail exchangers, priorities, and whether each target actually resolves.
RFC 5321
DNSSEC Test
Signed, validating, or signed-with-a-broken-chain, the three states that matter.
RFC 4035
Reverse DNS
Do your sending IPs resolve back to a name, and does that name resolve forward again?
PTR · FCrDNS
DNS Records
Every record on one page, the way a mail server reads them.
lookup
Transport & brand 4
MTA-STS Test
Fetches the policy the way a sender does, HTTPS, no redirects, and checks it against your MX.
RFC 8461
TLS-RPT Test
Are TLS failures being reported to anyone, or happening in silence?
RFC 8460
BIMI Test
Logo, certificate, and the DMARC enforcement BIMI depends on.
draft
CAA Test
Which certificate authorities may issue for your domain, and which may not.
RFC 8659
Treatments & reports 7
SPF Flattener
Over the lookup limit? Expand the chain into addresses, with the staleness cost stated up front.
treatment
Sender Readiness
Will the bulk-sender rules reject you? Find out before they do.
Google · Yahoo · Microsoft
Bloodwork
Read your aggregate reports without a spreadsheet. Parsed in your browser.
DMARC reports
DMARC Generator
Build a DMARC record with the policy, subdomain rules and reporting you actually want.
builder
SPF Generator
Build an SPF record, with a live count of the lookups you are spending.
builder
MTA-STS Generator
Build the DNS record and the policy file it points at, with a fresh id.
builder
TLS-RPT Generator
Build the record that gets TLS failures reported to you.
builder