Is your domain protected and visible?
More than 30 checks on your email, your DNS, your website and your visibility in Google, Bing and AI tools. A score out of 100, clear recommendations, and the detailed report by email.
Understanding the result
What are SPF, DKIM and DMARC for?
SPF lists the servers allowed to send email for your domain, DKIM signs your messages, and DMARC tells recipients what to do with messages that fail these checks. Together, they stop an attacker from sending emails while pretending to be you.
Why does it matter?
CEO fraud and payment fraud often rely on spoofing a domain. Without DMARC, your customers and suppliers may receive fake emails in your name.
What changes with the new DMARC standard?
The new DMARC standard (RFC 9989, published in May 2026) removes the pct, rf and ri tags, adds the “t=y” testing mode and the “np” policy for non-existent subdomains, and replaces the Public Suffix List with a DNS tree walk. Existing records remain valid.
What does the audit check?
Email (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DANE, BIMI), DNS (DNSSEC, CAA, name servers, domain expiry date), the website (HTTPS, redirects, security headers, CMS version, security.txt) and visibility in Google, Bing and AI tools. Only public data is consulted, along with databases that record what is already visible on the internet, to spot sensitive services exposed on the domain's addresses.
Is the test intrusive?
No. No scan or connection attempt is made: the audit only reads public information, as a browser or a mail server would, and consults databases that record what is already visible on the internet.