Stop attackers from impersonating your business.
Find out whether someone could send email that looks like it came from your domain. VyxGuard reads your public SPF, DKIM and DMARC records and explains the results in plain language. Nothing to install, no sign-up.
Join the waitlist to hear about new features.
- SPF recordWaiting
v=spf1 include:mail.example ~all - DKIM signingWaiting
common selector "s1" found - DMARC policyWaiting
p=none: spoofed email still delivered - MX recordsWaiting
mail.example, priority 10
Demo only. The domain, records and score are made up, and no real scan is running. Use the checker below for real results.
Check your domain
Enter a domain to read its public email security records. Free, no sign-up.
- SPF record
- DKIM signing
- DMARC policy
- MX records
Want to hear about new features? Join the waitlist · Missing something? Tell us what to add
How the score works
Out of 100: DMARC up to 40 (40 if it blocks or quarantines failing email, 10 if it only monitors), SPF 25, DKIM 25, MX 10. The score is a guide to email spoofing protection only, not a full security rating. DKIM is checked against 10 common selector names, so a "not found" can be a false alarm. Records are read from Cloudflare's public DNS service, and we don't store the domain you enter.
What the check covers
One thing, done properly: whether someone could send email pretending to be your domain.
-
Domain email security check Live now
Looks up your SPF, DMARC and MX records, and checks DKIM against common selector names. If a DKIM record isn't found there, we'll say so rather than call it missing, because we can't test every possible name. The score follows a published points list.
How it works
How the checker works.
Add your domain
Type it in. That's all we need to start.
We run the checks
You get a plain-language report that explains each result and how to fix it.
Fix what we find
Follow the steps, then run the check again.
How we handle your data
Plain rules we're building the product around.
Public records only
The first version reads public information such as DNS and domain registrations. It never touches your servers.
Nothing stored
The domain you enter is sent to Cloudflare's public DNS service to look up its records. We don't keep it.
Honest about limits
The first version reports problems. It does not block attacks, and we won't claim it stops every one.
Questions
Do I need to install anything?
No. The first version only needs your domain name.
Does it block attacks?
No. It only reports problems and explains how to fix them.
Who is it for?
Web agencies, early-stage startups and independent online shops that don't have a full-time security person.
When can I try it?
Now. Use the checker near the top of this page. Join the waitlist if you want to hear about new features.
Check your domain before an attacker does.
Join the waitlist and we'll email you about new features. No spam.
Join the waitlist