Email security

DMARC enforces quarantine or reject

SPF, DMARC, DKIM, MTA-STS: protection against spoofed mail in your name.

Why it matters

p=none only observes. Spoofed mail is still delivered, so customers can still receive phishing that looks like it comes from you.

How to fix it

Moderate · a few hours

Check the aggregate reports for legitimate senders that fail.
Fix them (SPF include or DKIM signing).
Change p=none to p=quarantine, later p=reject.

DNS TXT

_dmarc.example.com.  TXT  "v=DMARC1; p=quarantine; rua=mailto:[email protected]"

Test this now, free: SPF, DMARC & DKIM checker - no sign-up.

How we test it

The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.

Does your domain pass this check?

Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.

Scan your domain free