Four public records · No login · Nothing touched

Free email security check

Type your domain. We read the same public records every email server reads (MX, SPF, DKIM and DMARC) and show, in plain words, whether someone can send email that looks like it came from you.

The part after the @ in your work address, such as example.org.

What anyone can see about you

  1. Public records anyone can read: the email domain, with DMARC set; the tax return, filed, 38 employees; peers in Kings County, 388 of 562 with DMARC.
  2. Your own records only you can read: 41 open IT tickets; 38 staff, 6 with admin rights.
  3. Each of your own facts is tied by a thread to the public record it is about.
An example organisation. The lower plane is public: anyone, an attacker included, can read it. Your own facts sit above it, and each thread ties one of them to the public record it is about. This check reads only the lower plane.

Four public records, read in plain words

We read the public records that every mail receiver checks before it accepts mail from you.

We never touch your own systems, and we keep nothing but a one-line note that a reading happened.

The four things a reading shows, in the order mail meets them

  1. Host

    The company whose servers receive mail for you.

  2. Guard

    A public rule that lets receivers spot mail forged in your name.

  3. Receivers are told

    What your rule asks receivers to do with forged mail.

  4. Tools

    Services that have left a public mark on your domain.

The next step

Book a session Read the rule page for your kind →