Check your domain's
email security
Enter your domain for an instant verdict on your SPF, DKIM, DMARC, BIMI, and spoofing exposure. No sign-up required.
Read-only DNS lookups only — we don't store your domain or any personal data at this stage.
Running DNS checks…
Something went wrong. Please try again.
Get the full report
Every issue above, why it matters, and exactly how to fix it — written up and sent to your inbox.
Your email is used only to send you this report and occasional email security tips from inbox.consulting. No spam. Unsubscribe any time.
Got it — we'll be in touch.
We'll review the results for and send the report to your inbox.
What do these mean?
Plain-language explanations of each check above.
SPF — Sender Policy Framework
DKIM — DomainKeys Identified Mail
DMARC — Domain-based Message Authentication
BIMI — Brand Indicators for Message Identification
Displays your logo next to your emails in supporting inboxes (Gmail, Yahoo, Apple Mail, Fastmail). It only works once DMARC is enforced (quarantine or reject) and a logo is published over HTTPS.
Most providers also look for a digital certificate proving you own the logo — and there are two kinds:
- VMC (Verified Mark Certificate) — requires a registered trademark. Unlocks the logo and Gmail's blue verified checkmark.
- CMC (Common Mark Certificate) — no trademark required, cheaper. Shows the logo, but not Gmail's checkmark.
BIMI is still new and most domains don't have it yet. It's a branding feature, not a security control — it has no effect on the score above.
Want a full remediation plan?
Book a free 20-minute audit call. We'll walk through every issue, explain why it matters, and tell you exactly how to fix it.
Book a free audit call