Email Security Grader

SPF (Sender Policy Framework) is a DNS record that specifies which mail servers are authorized to send email on behalf of your domain. Without a proper SPF record, anyone can send email that appears to come from your domain — a technique used in business email compromise (BEC) attacks and phishing campaigns impersonating your brand. A misconfigured SPF record (too permissive, broken syntax, or missing) allows spoofing even if the record exists.

DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM to tell receiving mail servers what to do with messages that fail authentication. A DMARC policy of 'none' means no action is taken — it only monitors. A policy of 'quarantine' moves suspicious emails to spam. A policy of 'reject' blocks delivery entirely. Many organizations have DMARC records but remain at 'p=none', leaving them fully vulnerable to spoofing. The Email Security Grader highlights this common gap.

This happens because the sending domain either has no DMARC policy or has DMARC set to 'p=none', meaning receiving mail servers take no action against spoofed messages. Attackers explicitly target domains with weak email security configurations for BEC and phishing campaigns. Brands with 'p=reject' DMARC enforcement are dramatically harder to impersonate, so attackers tend to target easier domains. Checking your email security grade helps you understand your current exposure.

Yes. Enter any domain to get an instant, free email security grade with specific findings and remediation recommendations for each configuration issue. No account or registration required. The grader covers SPF, DKIM, DMARC, MTA-STS, and BIMI in a single scan.