Free Email Domain Security Scan
Run a free domain security scan below to find out, in about ten seconds, whether someone else could send an email that looks like it came from your business. No sign-up, no obligation, just a straight answer.
What This Domain Security Scan Checks
The scan looks at four settings in your domain’s DNS records, the technical rules that control who is allowed to send email as your business. SPF confirms which mail servers are permitted to send on your behalf. DKIM adds a digital signature so a receiving server can confirm a message wasn’t altered in transit. DMARC ties the two together and tells receiving servers what to do when a message fails, reject it, quarantine it, or let it through anyway. BIMI, where it’s set up, displays your verified logo next to your emails in supporting inboxes.
If any of these are missing or misconfigured, the scan flags it immediately with a risk score, so you know exactly where the gap sits without needing to read a DNS record yourself.
Why We Ask You To Run a Domain Security Scan
We run this domain security scan with clients as a first step, before any conversation about fixes, because it turns an abstract risk into something you can see. A missing DMARC policy is what makes invoice fraud and CEO impersonation possible in the first place, an attacker can send a message that appears to come from your finance team or your managing director, and most inboxes have no way of telling it’s fake.
It also affects whether your own legitimate email reaches the inbox. Google and Yahoo now expect proper domain authentication before they’ll reliably deliver mail, and Cyber Essentials, supplier questionnaires and cyber insurance renewals increasingly ask about it directly. The National Cyber Security Centre’s guidance on anti-spoofing controls sets out why UK organisations are expected to have this in place, and it’s the same standard we work to on our own domain.
If your result shows a gap, our Cyber Essentials certification support covers this as part of a wider review of your security controls, not just email.
Domain Security Scan: Common Questions
What is a domain security scan and how does it work?
A domain security scan checks your domain’s DNS records for SPF, DKIM, DMARC and BIMI settings, the rules that control who can send email as your business. It runs in seconds and shows a risk score along with what’s missing or misconfigured.
Is this domain security scan free?
Yes. There’s no sign-up and no obligation. You get your result immediately.
What do I do if my scan shows a risk?
Book a free conversation with us. We’ll talk through what your specific result means and what fixing it involves, most gaps are straightforward to correct once identified.
Will running this scan affect my email in any way?
No. The scan only reads your existing public DNS records. It doesn’t change anything or send any test emails.
How does this relate to Cyber Essentials?
Email authentication increasingly comes up in Cyber Essentials assessments and supplier security questionnaires. A domain security scan is a quick way to see where you stand before that question gets asked.