Toolbox
The Toolbox provides a set of diagnostic and audit tools for verifying your email security configuration. Each tool can be run against any domain — enter a hostname and get instant results.
Audit Tools
DMARC Audit
Performs a full analysis of your DMARC record. Checks policy settings, reporting configuration, and alignment mode. Returns actionable recommendations for improving your DMARC posture.
SPF Audit
Validates your SPF record and checks for common issues like exceeding the 10-lookup limit, overly permissive mechanisms, or missing includes for known sending services.
DKIM Audit
Verifies DKIM records and key configuration for a given selector and domain.
Not all DKIM records can be found through lookups, since DKIM selectors can be arbitrary. You may need to know the specific selector name used by your sending service.
MX Audit
Validates your Mail Exchange (MX) records to ensure proper email routing. Checks that MX hosts resolve correctly and are reachable.
BIMI Audit
Checks your BIMI (Brand Indicators for Message Identification) record validity. Verifies that the SVG logo and optional VMC certificate are correctly configured so your brand logo displays in supported email clients.
Lookup and Reputation Tools
DNS Lookup
A comprehensive check of all email authentication-related DNS records in one place. Queries SPF, DKIM, DMARC, MX, and BIMI records simultaneously.
Domain Reputation
Checks a domain's reputation across common blocklists and threat databases. Useful for identifying whether a domain has been flagged for spam or abuse.
IP Reputation
Checks the reputation of a specific IP address against blocklists and threat intelligence sources. Use this to verify that your mail server IPs are not listed.
URL Reputation
Checks a URL's reputation for phishing, malware, or other threats. Useful for verifying links found in email content.
Email Header Analyzer
Parses raw email headers and extracts key information including the authentication chain (SPF, DKIM, DMARC results), routing hops, and delivery timing. Paste full email headers to analyze the authentication flow of a specific message.