Your Domain Just Got Scanned. Here’s What The Result Means.
A domain scan checks the settings that control who is allowed to send email using your business name. When those settings are missing or set up wrong, anyone can send a message that looks like it came from you, a supplier, your finance team, even your managing director, and your own systems have no way of telling the difference.
If you’ve ended up on this page by accident, you probably haven’t run your scan yet. Carry out a free domain security scan here, it takes about ten seconds, then come back to this page to see what your result means.
What the four checks actually do
Your results screen shows four labels. Here’s what each one means in plain terms.
SPF
Sender Policy Framework. Controls which mail servers are allowed to send email as your domain. Without it, almost anyone can send a message that claims to be from you.
DMARC
Domain-based Message Authentication, Reporting and Conformance. Tells receiving mail servers what to do when a message fails the checks above: reject it, quarantine it, or let it through. Without a policy in place, most inboxes let the fake message through anyway.
DKIM
DomainKeys Identified Mail. Adds a digital signature to your outgoing email so the receiving server can confirm it genuinely came from you and wasn’t altered on the way.
BIMI
Brand Indicators for Message Identification. Displays your verified logo next to your emails in supporting inboxes, a visual signal to recipients that the message is genuinely from you.
Why this matters beyond the score
Money at risk
Invoice fraud and payment redirection scams usually start with a spoofed email that looks like it came from your finance team or a known supplier. A missing or weak DMARC policy is what makes that email possible to send in the first place.
Trust at risk
A customer or supplier receiving a phishing email that appears to come from your domain will not know your systems were never touched. The damage to trust happens regardless, and it happens to your name, not the attacker’s.
Deliverability at risk
Google and Yahoo now expect proper domain authentication before they’ll reliably deliver your email. Without it, legitimate messages from your own business can end up filtered or blocked before they reach the inbox.
Compliance at risk
Cyber Essentials, supplier security questionnaires and cyber insurance renewals increasingly ask about email authentication directly. A gap here can hold up a certification or a contract that has nothing to do with email on paper.
Why organisations trust us to fix this
Get your scan result explained properly
Book a short, free conversation and we’ll walk through what your result means for your business, and what fixing it actually involves.
Start with a free conversation