Free tool · Email security
Email security checker
Could someone send convincing email as your organisation? Enter your domain to see how well it is protected against spoofing and interception, with a plain-English fix for every gap.
Private by design: the checks run in your browser. Only public DNS lookups are made (via Cloudflare or Google DNS); nothing is sent to or stored by Amon Dîn.
What we check
- SPF: which servers may send email for your domain, and whether the record is strict enough.
- DMARC: what receivers should do with forged email (none, quarantine or reject) and whether you get reports.
- DKIM: whether signing keys are published at common selectors. A miss is not conclusive.
- MX: whether the domain receives email.
- MTA-STS and TLS-RPT: whether email to you must be encrypted in transit, and whether you hear about failures.
- BIMI: optional brand logo in supporting inboxes.
- DNSSEC: whether your DNS answers are signed.
This is a quick external check of public DNS records, not a full audit. It cannot see how your mail platform is configured internally.