EMAIL DOMAIN SECURITY REVIEW · PILOT SERVICE

Understand your company's email authentication settings

I review the public SPF and DMARC settings for an authorized company domain, plus DKIM selectors its administrator supplies. You receive a readable report showing what was found, what needs attention, and what remains uncertain.

01

Why this assessment matters

A company can have a professional website and functioning email while its email authentication configuration remains incomplete or incorrect. This can make some forms of domain impersonation easier and can affect email trust and deliverability.

  • Understand the current email DNS configuration.
  • Identify missing or incorrect controls.
  • Separate confirmed findings from unknown information.
  • Receive a prioritized correction plan.
  • Verify the configuration again after corrections.

This service does not claim to stop all phishing.

02

What is assessed

SPF

Reviews the SPF record, authorized sending infrastructure, duplicate records, syntax, recursive lookups and DNS lookup limits.

DMARC

Reviews DMARC discovery, syntax, requested policy, inheritance and reporting configuration.

DKIM

Reviews public keys only for selectors supplied by the client. Without a selector, DKIM remains Not assessed.

03

Client workflow

01Confirm ownership or authorization
02Collect email context and legitimate sending services
03Receive active DKIM selectors
04Run the passive assessment
05Review the report
06Apply corrections through the client's administrator
07Reassess and compare the results
04

Deliverables

  • HTML assessment report
  • JSON technical evidence
  • SPF, DMARC and supplied DKIM findings
  • Confidence and priority explanations
  • Clear assessment limitations
  • Prioritized remediation plan
  • 30-minute results meeting
  • One follow-up assessment
  • Before/after comparison report
FICTIONAL LABORATORY EXAMPLE

example.com

In this simulated case, SPF initially authorized every sender, DMARC began in monitoring mode, and the supplied DKIM selector contained an invalid key. Corrections were simulated. The comparison report recorded the verified changes.

This is a fictional example. No private client report is published here.

FREE DEMONSTRATION

Book a free 15-minute demonstration

See a fictional assessment, understand the evidence and learn how the service could complement your organization or client offering.

BOOK A DEMO
05

Pilot pricing

Morocco Pilot

500 MAD

One authorized domain

  • Assessment
  • HTML and JSON reports
  • 30-minute results meeting
  • One reassessment after corrections
REQUEST A PILOT

International Pilot

US$80 / EUR75

One authorized domain

  • Assessment
  • HTML and JSON reports
  • 30-minute results meeting
  • One reassessment after corrections
REQUEST A PILOT
Pilot pricing is available while the service is being validated with early clients.
06

Tested and transparent

186 testsAutomated tests passing
Windows + UbuntuCI coverage
Python 3.11 to 3.14Supported test matrix
Pilot validationIndependent client review pending
Inconclusive DNS errorsErrors never become secure results
Accurate correction stateRemoved checks do not become false corrections
Selector-dependent DKIMUnevaluated without supplied selectors
Evidence includedReports include evidence and limitations

No automatic recommendation of DMARC p=reject is made. The service is currently in pilot validation and is not independently certified.

07

What the service does not do

Clear service boundaries

  • No email sending
  • No mailbox access
  • No password testing
  • No SMTP probing
  • No website scanning
  • No automatic DKIM selector discovery
  • No DNS modification
  • No penetration testing
  • No security certification
  • No guarantee against all phishing
  • No immediate DMARC p=reject recommendation without sender validation
08

Created by Said Almanani

Cybersecurity engineering student and independent developer based in Morocco, focused on defensive security, trustworthy evidence and understandable client reporting. The review uses my Email Security Auditor tool to produce the technical report.

PILOT ASSESSMENT

Ready to discuss your domain?

The demonstration is free. The assessment pilot is paid.

REQUEST A DEMO
09

Request a demonstration or pilot assessment

Information submitted through this form is used only to respond to the request. An assessment begins only after the scope, authorization and retention terms are confirmed.