← All tools

Email Security Signals

Give it a list of domains. Get back an A–F email-authentication grade for each, the exact problems found, whether it meets the Google/Yahoo/Microsoft bulk-sender rules, which vendors send its mail, who processes its DMARC reports — and plain-English pitch reasons for outreach.

Built for MSPs, email-security and deliverability vendors. A pay-per-domain alternative to EasyDMARC ($35.99+/mo) or MxToolbox Delivery Center ($129/mo) when you need a bulk audit of other people’s domains.

Run on Apify Store →

What you get per domain

grade, score	A–F and 0–100 on SPF, DMARC, DKIM, MTA-STS, TLS-RPT, BIMI, DNSSEC and security.txt
bulkSenderCompliant	Google & Yahoo (2024) and Microsoft (2025) bulk-sender authentication rules: pass, fail, or unknown
spf	Record, recursive DNS-lookup count against the 10-lookup limit, `all` qualifier
dmarc, dmarcReportingVendor	Policy, pct, rua/ruf — and who receives the reports (dmarcian, Valimail, EasyDMARC, Proofpoint, Red Sift, …)
sendingVendors	Senders authorised in SPF: SendGrid, Mailchimp, Amazon SES, HubSpot, Salesforce, Zendesk, …
issues, pitchReasons	e.g. “DMARC at p=none — candidate for DMARC enforcement service”, “SPF over 10 lookups (14) — candidate for SPF flattening”

How it works

100% public DNS data, no logins:

Looks up MX, SPF, DMARC, 15 common DKIM selectors (plus any you add), MTA-STS, TLS-RPT and BIMI records over DNS-over-HTTPS, following SPF includes and redirects to count lookups.
Detects wildcard TXT records so a zone-wide answer isn’t mistaken for a real DKIM key or policy.
A failed lookup is reported as unknown, never as “missing”: you’re not told a domain is spoofable because a resolver timed out.

Use cases

MSPs & IT consultancies: audit a prospect list and lead with the specific gap (“your DMARC isn’t enforcing”).
DMARC / deliverability vendors: find domains on p=none, with no reporting vendor, or using a competitor’s.
Security questionnaires & vendor risk: a quick posture grade for a list of suppliers.
Pair with Tech Enricher for the rest of a company’s stack.

Pricing

Graded domain	$0.02 — charged only for a domain that exists in DNS and was fully looked up

Free: unparseable inputs, IP addresses, private-network names, non-existent domains, DNS lookup failures (the row says to retry) and duplicates (stripe.com, https://www.stripe.com/pricing and jane@stripe.com are one domain). Set a max charge per run and the tool stops cleanly at that limit.