Mail Security

Know who can send as you.

Real-time SPF, DKIM and DMARC posture for every domain you own, with the next step spelled out. Tests read DNS and mail servers; no message is sent.

Mail Security · Posture · EMCHEQSample

Mail Security

Posture

Type any domain to read its SPF, DMARC and MX records live. DKIM and the full tests run in the app.

Posture

See where each domain stands.

A DMARC ladder from none to reject, plus SPF and DKIM results from the last test, and what to publish next.

Posture

Anyone can spoof acme.io today

SPF, DKIM and DMARC results from the last test.

NoneNo DMARC

Monitorp=none

Quarantinep=quarantine

Rejectp=reject

SPFFound

DKIM1 selector

DMARCMissing

Sample data

SMTP nodes

Read-only checks of TCP connect, STARTTLS and AUTH. No message is ever sent.

SMTP nodes

connect  smtp.acme.io:587
220 smtp.acme.io ESMTP ready
STARTTLS
220 Ready to start TLS
AUTH
235 Authentication successful
QUIT  — no message was sent

Sample data

More to investigate

PostureDomainsSMTP nodesHeader analyzerLook-alike domainsSpoof testPhishing campaigns

Add a domain and see SPF, DKIM selectors and DMARC policy side by side, with a fix plan for what's missing.

Paste a message's headers and follow the route it took, hop by hop.

Find registered domains that imitate yours before someone uses them.

Run a simulation against recipients you choose and see who clicked.