Check whether your domain is protected against email spoofing. WebGuard AI reads your SPF, DKIM and DMARC records and DNSSEC status and tells you what to change so attackers cannot send email in your name.
SPF lists the servers allowed to send email for your domain. The checker verifies that an SPF record exists and that it ends with a strict policy rather than allowing any sender.
DMARC tells receiving servers what to do with emails that fail SPF and DKIM. A missing DMARC record, or a p=none policy, leaves your domain open to phishing and spoofing.
DKIM signs your outgoing emails so they cannot be altered, and DNSSEC protects your DNS answers from tampering. The scan looks for common DKIM selectors and checks whether DNSSEC is enabled.
SPF says which servers can send your email, DKIM signs each message, and DMARC tells receivers how to treat messages that fail those checks and where to send reports.
Without DMARC, anyone can send emails that appear to come from your domain. DMARC with p=quarantine or p=reject blocks most spoofing and improves deliverability.
Yes. SPF, DKIM, DMARC and DNSSEC are checked in every free scan, together with SSL, headers and exposed files.