Email Security Monitor

Grade your domain's email security in seconds

Scan SPF, DMARC, DKIM, and BIMI. Get an A–F grade with actionable findings. Sign up for weekly monitoring and be the first to know when anything changes.

✅ You're now subscribed to Inbox Shield monitoring. Your first report will arrive this Monday.
Free scan — no account required. We check SPF, DMARC, DKIM, MX, and BIMI.
Checking DNS records… 0%
SPF
DMARC
DKIM
MX Records
BIMI
?
Overall Email Security Grade

Findings

Get weekly email security alerts

We'll scan every Monday and email you if anything changes. Free plan included.

✅ Subscribed! First report arrives this Monday.

How it works

Scan now. Monitor forever.

From zero to a full email security audit in under 10 seconds — then stay protected with weekly change alerts.

Step 01
Enter your domain
Just type your domain name above. No sign-up, no extension, no browser plugin needed. Works for any domain worldwide.
Step 02
Get your grade in seconds
We check 5 DNS-based email security protocols and return an A–F grade with specific, actionable findings for each check.
Step 03
Subscribe for weekly monitoring
Enter your email to get a weekly digest every Monday. We'll alert you the moment your SPF, DMARC, or DKIM configuration changes.
Step 04
Fix issues with our guides
Every finding links to a plain-English remediation guide. Pro subscribers get priority support for complex multi-vendor setups.

What we check

5 layers of email security

Email spoofing is one of the top attack vectors against businesses. These five protocols form a complete defense stack.

🛡️
SPF
Sender Policy Framework. Defines which mail servers are authorized to send email on behalf of your domain. Stops basic spoofing.
📋
DMARC
Domain-based Message Authentication. Tells receiving servers what to do with emails that fail SPF or DKIM — monitor, quarantine, or reject.
🔑
DKIM
DomainKeys Identified Mail. Cryptographically signs outgoing email so recipients can verify it wasn't tampered with in transit.
📬
MX Records
Mail Exchange records. Verifies your domain is properly configured to receive email and detects missing or misconfigured mail routing.
🖼️
BIMI
Brand Indicators for Message Identification. Displays your verified logo in Gmail, Yahoo, and Apple Mail. Requires p=quarantine or p=reject DMARC first.

Pricing

Simple, honest pricing

Start free. Upgrade when you need daily monitoring, key rotation alerts, or dedicated support.

Free
Inbox Shield Free
$0 forever
For individuals and small sites who want visibility into their email security posture.
  • Instant SPF / DMARC / DKIM scan
  • MX + BIMI detection
  • A–F grade with findings
  • Weekly Monday digest email
  • 1 domain
  • Daily monitoring
  • DKIM key rotation alerts
  • Remediation guides
  • Priority support

FAQ

Common questions

Why does my domain need DMARC?
Without DMARC, anyone can send email pretending to be from your domain. This is used for phishing, invoice fraud, and impersonation attacks. DMARC tells receiving mail servers what to do with these fake emails — and gives you visibility via aggregate reports.
My SPF uses ~all (softfail). Is that bad?
Softfail (~all) means unauthorized senders are marked but not rejected. It's better than no SPF, but you should upgrade to -all (hardfail) once you're confident your legitimate senders are all listed. We'll flag this in your findings and explain how to upgrade safely.
What DKIM selectors do you check?
We probe 29 common selectors used by Google, Microsoft, Mailchimp, Sendgrid, Mandrill, Mimecast, Proofpoint, Amazon SES, and many others. If your DKIM selector isn't on the common list, it won't be detected by the free scan — Pro subscribers can request custom selector addition.
How often does Pro plan monitor my domain?
Pro plan monitors daily — we run a full SPF/DMARC/DKIM/MX check every 24 hours and send an alert email the moment anything changes. The Free plan runs weekly on Monday mornings.
Does this affect my email deliverability?
No. We only read your public DNS records — we never send email to or from your domain, and we don't touch your mail servers. It's entirely passive read-only DNS lookups.
Can I cancel anytime?
Yes. Pro subscriptions are managed through Stripe and can be cancelled at any time from your billing portal. There are no contracts or cancellation fees.

Your domain's email security
graded in 10 seconds

Free scan. No account required. Know your exposure before attackers do.

Scan my domain → View Pro plan