Home / Cybersecurity / Email security check

Free tool · public data only · 10 seconds

Email security check

Enter your company domain. We read the public records that protect your email — SPF, DKIM, DMARC, MTA-STS, TLS reporting, DNSSEC — and the security headers of your website, then give you a score and the exact fixes.

Public DNS and HTTP headers only. Nothing is scanned.

What we check

CheckWhy it mattersGood result
SPFLists the servers allowed to send email for your domain.One record ending in -all or ~all
DKIMSigns your emails so they cannot be altered.A key published for your email provider
DMARCTells receivers what to do with fake emails using your name — the main defence against brand phishing.p=quarantine or p=reject, with reports
MTA-STS & TLS-RPTForces encrypted delivery to your mail servers and reports failures.Policy in enforce mode
DNSSECProtects your DNS answers against tampering.Signed zone
Website headersHTTPS, HSTS, Content-Security-Policy and other headers reduce common web attacks.HTTPS with HSTS and the main headers present

Frequently asked questions

Is this check intrusive?

No. It only reads public DNS records and the public response headers of your website — the same information any mail server or browser sees. Nothing is scanned or attacked.

Why does DKIM show as not found when we use it?

DKIM records live under a 'selector' name we cannot list. We test the most common ones (Google, Microsoft 365 and others). If yours uses a custom selector, the result may be a false negative.

Why does this matter for NIS2 and questionnaires?

Email is the first attack channel. DMARC enforcement, encryption in transit and basic web headers are among the first things customers and auditors check.

Does it help deliverability too?

Yes. Since 2024 Google and Yahoo require SPF, DKIM and DMARC from bulk senders. A weak setup sends your own emails to spam.

Free first call · English

Want us to fix it?

Send us your result: an English-speaking advisor replies within one business day with the exact changes, who should make them and the cost — usually a few hours of work.

  • Reply within one business day
  • Written scope and price before any work
  • Netherlands · Belgium · Luxembourg

Prefer email? Write to contact@cybernovalabs.io

→ Free cybersecurity call