Domain Health Check
Get your domain's email health grade. A comprehensive report card combining SPF, DKIM, DMARC, MX, and TLS analysis into a single A-F score.
What is a domain health score?
A domain health score is a comprehensive evaluation of your email authentication posture. Instead of checking SPF, DKIM, DMARC, and MX separately, the health score combines all checks into a single A-F grade and a numeric score (0-100).
The grade is calculated as a weighted average: DMARC (30%), SPF (25%), DKIM (25%), and MX (20%). Each category evaluates not just whether a record exists, but how well it's configured — a domain with SPF but over the lookup limit scores lower than one with a clean, optimized record.
Every single check might show "mostly okay." But combined, your domain might score a D. That's why 15% of your email lands in spam — cumulative small issues creating a major deliverability problem.
Why your grade matters
Strong email authentication. Your domain is well-protected against spoofing. Emails are delivered reliably. Keep monitoring to maintain this score.
Partial protection. Some records are configured but with issues — SPF near the limit, DMARC on p=none, or weak DKIM keys. Attackers could exploit the gaps.
Significant vulnerabilities. Missing records or critical misconfigurations. Email deliverability is likely impacted. Spoofing is possible.
Critical. Little to no email authentication. Your domain is an easy target for phishing and spoofing. Immediate action required.
Frequently asked questions
A comprehensive A-F grade evaluating your email authentication: SPF, DKIM, DMARC, MX, and TLS. One score that tells you everything about your email security posture.
Weighted average: DMARC (30%), SPF (25%), DKIM (25%), MX (20%). Each category scores 0-100 based on record presence, validity, configuration strength, and absence of issues.
Serious email authentication problems. Your domain is vulnerable to spoofing and your emails likely land in spam. Common causes: missing DMARC, SPF over lookup limit, no DKIM, weak policies.
Fix in priority order: 1) Add missing records, 2) Fix SPF lookup issues, 3) Upgrade DKIM to 2048-bit, 4) Move DMARC to p=reject, 5) Enable TLS on mail servers.
Want ongoing monitoring?
Checking once is a start. But email authentication breaks silently over time. Get alerted the moment something changes.
Free plan includes 1 domain. No credit card required.