Find out who is sending email as your clients.

Check any domain's SPF, DKIM and DMARC in about a second. Then let us read the DMARC reports Google, Yahoo and Microsoft are already generating about your domains - and turn them into something a human can act on.

No signup. No credit card. Results are a permanent link you can send to a client.

The reports already exist. Nobody can read them.

Every mailbox provider sends a daily DMARC report for every domain that asks for one. They arrive as gzipped XML attachments. This is what one looks like.

<record><row><source_ip>45.83.220.9</source_ip><count>41</count>
  <policy_evaluated><disposition>none</disposition><dkim>fail</dkim><spf>fail</spf>
  </policy_evaluated></row></record>

That fragment says 41 messages claiming to be from your client failed every authentication check and were delivered anyway. Multiply by a few hundred rows a day, across every domain you manage, and you have the reason nobody reads them.

Who is sending as you

Every sending IP, grouped and ranked by volume, with the pass rate for each one and the domain it authenticated as.

What is about to break

A forgotten CRM or invoicing tool that fails authentication today gets blocked the day you move to p=reject. Find it first.

Whole roster, one price

Per-domain pricing punishes you for having clients. Ten domains for $39, fifty for $129, no per-domain maths.

Two free tools, no account needed

Both work on their own. They are also the fastest way to see whether the paid product is worth anything to you.

Email authentication checker

SPF including the RFC 7208 ten-lookup limit that quietly breaks authentication, DMARC policy strength, DKIM across 26 common selectors, MX, BIMI, MTA-STS and TLS-RPT. Scored, graded, with the exact fix for each finding.

DMARC report viewer

Drop in the .xml.gz or .zip that landed in your inbox and read it as a table. Nothing is stored, nothing is emailed to you, and you do not need an account.

Open the viewer

Why this matters now

Google and Yahoo made DMARC a requirement for bulk senders in 2024, and Microsoft followed for high-volume senders in 2025. The failure mode is not a warning: mail is rejected or filed as spam. When a client's campaign stops landing, the answer lives in a DMARC report - and the report is worthless if nobody has been collecting it.

See pricing How it works