Free tool

Domain health check

Type in your business's domain to see how its email security, website and DNS are set up. It only reads public records, the same ones anyone on the internet can see.

What gets checked

SPF, DKIM and DMARC
The three records that stop people sending email pretending to be you, and help your real email avoid the spam folder. Google, Microsoft and Yahoo now require them from anyone sending email in bulk, and filter more heavily when they're missing.
Email provider
Where your email is delivered, such as Google Workspace or Microsoft 365.
Website and HTTPS
Whether your site loads securely, sends visitors to the secure version, and sits behind Cloudflare.
DNS hosting and DNSSEC
Who runs your domain's DNS, and whether its answers are signed so they can't be faked.