Email Security Checker
Bring the existing SPF and DMARC public-record observations into one view.
Run Email Security Checker
Public targets only. No credentials, changes or anonymous active security testing.
What this check does
- Separate bounded SPF lookup
- Separate bounded DMARC lookup
What it does not prove
- DKIM selectors/signatures are not checked
- No mailbox, message or credential access
- No deliverability, spam-filter or full email-security verdict
Interpret the returned state
PASS means the endpoint returned evidence within its named boundary. REVIEW, WARN and FAIL must be read alongside that evidence; they are not automatically vulnerabilities. UNKNOWN means the observation could not establish the answer.
Why it matters
Reading the two policies together makes the next review easier. Their results remain separate: one PASS must not conceal an unknown or missing second observation.
Common review questions
- One policy is visible while the other needs review.
- Both policies may exist without covering all legitimate mail.
- An upstream failure means unknown evidence, not a detected vulnerability.
Keep the two observations and their limits separate
Run this check once to request the existing SPF and DMARC endpoints. Neither endpoint sends a message or reads a mailbox.
Read each returned state and record. REVIEW means the bounded lookup did not establish the expected record; it is not a penetration-test finding.
For a deeper assessment, supply the authorised domain and the decision you need to make. Do not supply a mail password, API secret or DKIM private key.
Read the related technical guide →When a fuller review would help
ZENQIX can combine relevant observations, explain priorities and recommend next steps. No automatic remediation, penetration test or complete-security guarantee is included.
Explore Website AssuranceFrom ₹4,999