TOOLS & RESOURCES / FREE DOMAIN CHECK
Email Domain Security Scan
See what your domain says about email security. Find gaps, understand the signals, and decide what to address next.
KEY TAKEAWAYS
- Start with visibility. Review the published settings behind your domain.
- Read the context. Authentication and transport protection answer different questions.
- Change carefully. Check legitimate senders before tightening policies.
01 / THE BUSINESS STAKE
Your name carries trust.
A convincing invoice or payment request can draw on the trust people place in your organisation. Domain authentication helps receiving services assess messages claiming to use your domain; it is one part of a wider defence against impersonation.
What is at stake
- Payments — fraudulent invoices and redirected funds.
- Reputation — confidence in messages carrying your name.
- Operations — investigation, disruption, and recovery time.
- Governance — clear ownership of your email protections.
02 / HOW THE CHECKS FIT TOGETHER
Different checks. A clearer picture.
Open a topic for the meaning behind the result. The diagram explains the relationship between the core authentication controls.
Two authentication signals. One policy for your domain.
SPF and DKIM contribute different evidence. DMARC checks alignment with the visible From address and publishes how failures should be handled.
SPF — authorised sending systems
SPF publishes which systems may send mail for a domain. A receiving service compares the sending server with those rules.
It is one authentication signal. SPF alone does not prove that the address displayed to the recipient is genuine.
DKIM — a signature for the message
DKIM adds a domain signature to outgoing email. Receivers use the published public key to check the signature and signed content.
A valid signature supports message authentication; it does not show that the message itself is harmless.
DMARC — alignment and policy
DMARC checks whether a passing SPF or DKIM identity aligns with the domain in the visible From address. It also publishes the requested handling of failures: monitoring, quarantine, or rejection.
Review genuine sending services and reports before moving to stronger enforcement.
BIMI — a logo in supporting inboxes
BIMI can display a brand logo in participating inboxes. It depends on DMARC enforcement and the mailbox provider’s requirements; some providers also require a mark certificate.
Logo display is not universal and should not be treated as proof that a message is safe.
MTA-STS — protection during delivery
MTA-STS lets a receiving domain publish a policy for encrypted email delivery. Supporting senders can use that policy to require an authenticated TLS connection.
This protects transport between mail services. It answers a different question from the sender-authentication checks.
03 / CHECK YOUR DOMAIN
Start with your domain.
Enter your business domain below. The checker brings its findings and technical evidence together in one report.
Email Security Checker
Enter any domain to analyse its email authentication posture.
Enter a domain name — e.g. cybersolace.co.uk
Domains are not stored. Results are cached briefly to keep checks fast.
A configuration check is a starting point, not a guarantee that every message is safe.
Private test site: email delivery is disabled. The domain checker uses public records.
04 / FROM FINDINGS TO ACTION
Make the findings useful.
01
Confirm your senders.
Include your main email service, newsletters, invoicing systems, and other services that send on your behalf.
02
Review the evidence.
Discuss warnings with your email administrator. Confirm provider-specific details before assuming a missing record means a control is absent.
03
Tighten with care.
Test legitimate mail flows and review reports before enforcing stronger policies. Recheck after changes.
Put the right protections in place.
If you need help interpreting the findings or planning a change, we can work with your team on the next step.
FURTHER GUIDANCE
NCSC: anti-spoofing controls · GOV.UK: secure email services · BIMI implementation guide · MTA-STS standard