Criminals love sending email that looks like it came from you. Type your email domain below and we will check the public settings that stop that happening, give you a score, and explain in plain English what to fix. Built for Microsoft 365, and it works for any email provider.
No login and nothing to install. We only read records your domain already publishes to the world. We store nothing. Please only check domains you own or look after.
SPF lists who may send as you. DKIM signs your email so it can't be faked or changed. DMARC tells other providers to block email that fails those checks. MTA-STS forces encrypted delivery to you, and DNSSEC stops your domain's records being forged.
This only sees what your domain publishes publicly. It can't see inside your Microsoft 365, so it says nothing about multi factor sign in, admin accounts or mailbox rules. A good score here is a strong start, not a clean bill of health. Treat it as a prompt to check properly.
Most of these are a few DNS records and a couple of switches in Microsoft 365. We set them up for businesses across Norfolk and Suffolk, safely and without breaking your email.
Book a free review ↗This check only sees your public email records. Sign in with your Microsoft 365 admin account and in about a minute we'll check multi factor sign in, old style sign ins, admin accounts, file sharing and your Microsoft Secure Score, then give you a full score and action plan. Read only, free, and we keep no access afterwards.
A free technology review. We map your systems, flag the risks and tell you what we’d do first. No obligation to move anything to us.