A misconfigured domain translates into emails rejected as spam, a website that lags or goes down, and above all exposure to targeted phishing attacks (attackers look for domains with missing SPF/DKIM/DMARC to impersonate companies). Regular checks aren’t luxury — they’re what keeps a customer from receiving a fake email @your-domain.com and paying a fraudulent invoice.

Our tool covers the whole perimeter in a single request: base DNS, email security, DNSSEC, TLS certificate of the website, mail client configuration (Thunderbird, Microsoft). Data comes from public sources — Cloudflare DNS (DoH) for DNS queries and RIPE Stat for network information — no intrusive scan is launched against the target domain.

How to read the results?

Each card shows a status: green = correct, yellow = present but improvable (e.g. DMARC policy at p=none instead of p=quarantine), red = missing or broken. Red items are priorities — typically a missing DMARC, an expired TLS certificate, or an MX pointing to an unreachable server.

If your audit reveals configurations to harden and you don’t have the in-house team to deploy them, get in touch — that’s what we do.