SPF
Reviews the SPF record, authorized sending infrastructure, duplicate records, syntax, recursive lookups and DNS lookup limits.
I review the public SPF and DMARC settings for an authorized company domain, plus DKIM selectors its administrator supplies. You receive a readable report showing what was found, what needs attention, and what remains uncertain.
A company can have a professional website and functioning email while its email authentication configuration remains incomplete or incorrect. This can make some forms of domain impersonation easier and can affect email trust and deliverability.
This service does not claim to stop all phishing.
Reviews the SPF record, authorized sending infrastructure, duplicate records, syntax, recursive lookups and DNS lookup limits.
Reviews DMARC discovery, syntax, requested policy, inheritance and reporting configuration.
Reviews public keys only for selectors supplied by the client. Without a selector, DKIM remains Not assessed.
In this simulated case, SPF initially authorized every sender, DMARC began in monitoring mode, and the supplied DKIM selector contained an invalid key. Corrections were simulated. The comparison report recorded the verified changes.
This is a fictional example. No private client report is published here.
See a fictional assessment, understand the evidence and learn how the service could complement your organization or client offering.
One authorized domain
One authorized domain
No automatic recommendation of DMARC p=reject is made. The service is currently in pilot validation and is not independently certified.
Cybersecurity engineering student and independent developer based in Morocco, focused on defensive security, trustworthy evidence and understandable client reporting. The review uses my Email Security Auditor tool to produce the technical report.
The demonstration is free. The assessment pilot is paid.