Academy
Tools
Free, no account, public DNS only.
Domain Trust Scanner Thirty checks across DNS, email authentication and mail transport, with a score you can reproduce.Runs everything below at once.DNS
Whether the zone itself is served correctly, and whether resolvers can tell your answers from forged ones.
DNSSEC Analyzer
Is my zone signed, is the chain actually complete, and are the signatures fresh?
Email authentication
Who is allowed to send mail as your domain, and what happens to anyone who is not.
SPF Inspector
Will my SPF record pass, or has it quietly gone over the lookup limit?
DMARC Inspector
Can someone send mail as my domain right now?
DKIM Inspector
Is my DKIM key actually published, and is it strong enough?
Mail transport and identity
How mail reaches you, whether it is encrypted in transit, and whether your brand is visible when it arrives.
MTA-STS Checker
Is mail to my domain required to travel over TLS, or is a downgrade still possible?
BIMI Checker
Why is my logo not showing up next to my mail?