Is your email actually authenticated?
SPFWise scans your SPF, DKIM and DMARC in one pass, grades the result from A+ to F, and shows you the exact record to change. No account, no guesswork.
Reads public DNS only. Nothing is stored unless you save the domain to an account.
Checks the records that decide where your mail lands:
One scan, your whole email setup
Every record below helps decide whether your mail is trusted or thrown away. SPFWise reads them the way mailbox providers do.
SPF
We expand every include and count your DNS lookups, so you never quietly trip the 10-lookup limit that breaks SPF.
DMARC
See your policy, whether reporting is on, and how far you are from a safe p=reject that actually stops spoofing.
DKIM
We probe the common selectors to find your signing keys and check they are published, strong enough, and not revoked.
BIMI
Check that your logo is ready for the inbox, with a valid mark and the DMARC enforcement it needs to show up.
Transport security
Verify MTA-STS and TLS-RPT so mail to your domain stays encrypted in transit and failures do not go unseen.
Deliverability
Review MX, DNSSEC and public blocklists to catch the quiet issues that keep you out of the inbox.
From unknown to protected in three steps
No agent to install and nothing to verify first. Type a domain and go.
- 1
Enter your domain
Type any domain. We read its public DNS records live, exactly as a receiving mail server would.
- 2
Read your grade
Every record is scored from A+ to F, with the raw values shown in plain sight so you can trust the result.
- 3
Fix it and keep it fixed
Copy the corrected record, publish it, then turn on monitoring so breakage never goes unnoticed.
Since 2024, weak email authentication gets you throttled
Google and Yahoo now require SPF, DKIM and DMARC from anyone sending in volume. Domains without them are rate-limited or rejected outright, and any domain without an enforced DMARC policy can be spoofed by anyone. A passing grade here is what keeps your mail in the inbox and your name off a phishing email.
- Required by Google and Yahoo for bulk senders
- No DMARC means anyone can send as you
- A broken SPF record sends real mail to spam
Start free. Upgrade when you want eyes on it around the clock.
Checks are free for everyone. Paid plans add continuous monitoring, DMARC report parsing and alerts, and are rolling out now.
Free
For a quick, honest audit.
Scan a domain- Unlimited domain scans
- Full grade and findings
- The exact record to fix
- No account required
Pro
Most popularFor teams who cannot afford a bad delivery.
- Everything in Free
- Continuous monitoring and change alerts
- DMARC aggregate (RUA) report parsing
- Up to 10 domains
- White-label PDF reports
Coming soon
Agency
Coming soonFor managing many domains and clients.
- Everything in Pro
- Unlimited domains
- Team access and roles
- API access
Launch pricing and may change. Monitoring and reports are rolling out now.
Questions, answered plainly
Scan your domain now
It takes one field and a fraction of a second. See your grade, then keep it green.