We verify the SPF record that defines which servers are authorized to send email on behalf of your domain.
What do we check?
Your report covers 6 key areas of your domain's email security configuration.
We look for DKIM records that cryptographically sign outgoing emails to verify their authenticity.
We evaluate the DMARC policy that tells receiving servers how to handle unauthenticated emails.
We verify MX records, mail server redundancy, and whether known providers are used.
We check for DANE/TLSA records that add an extra layer of TLS authentication to email.
We calculate a combined SPF, DKIM, and DMARC score to evaluate how vulnerable your domain is to spoofing.
How does it work?
Enter your domain
Provide the domain you want to check along with your name and email to receive the report.
DNS query
We query your domain's DNS records to obtain SPF, DKIM, DMARC, MX, and TLSA records.
Full analysis
We evaluate each authentication mechanism, enforcement policy, and spoofing resistance.
Get your report
Within seconds you'll receive a PDF in your email with scores, detailed findings, and prioritized recommendations.
Frequently Asked Questions
An email security analysis checks 6 DNS record areas: SPF (which servers can send email), DKIM (cryptographic signatures), DMARC (authentication policy and reporting), MX records (mail servers and redundancy), DANE/TLSA (TLS authentication for SMTP), and overall spoofing resistance.
IQ Source's email security checker is 100% free. Enter your domain and receive a complete PDF report with SPF, DKIM, DMARC, MX status, per-category scores, and prioritized recommendations directly in your email.
Verifying SPF, DKIM, and DMARC records takes 10 to 30 seconds. IQ Source's checker queries the domain's DNS records in real time via DNS-over-HTTPS and sends the report to your email within a minute.
A professional email security report includes an overall score (0-100), grades for each category (SPF, DKIM, DMARC, MX, DANE, spoofing resistance), specific findings for each DNS record, and prioritized recommendations to improve protection against phishing and spoofing.
Yes, checking a domain's email configuration is completely safe — it only queries public DNS records. IQ Source's checker transmits your information encrypted, only uses your email to send the report, and doesn't share data with third parties.
What comes next after this diagnostic?
Three concrete ways to move forward, each aligned to a different engagement model. Pick the one that matches where you are.
Talk to AI Maestro
If you need to discover where AI fits in your operation before building. Structured 2-month program with a Go/No-Go gate.
Request auditRequest a quote (Software)
If you already know what you need to build — web app, mobile, API, dashboard, or modernization. Monthly billing with deliverables every two weeks.
Quote projectTalk to a Tech Partner
If you need dedicated engineering capacity as an extension of your team. Monthly retainer, 3-month minimum, under your brand.
Explore partnership