Email & DNS security

Stop others sending as you.

xSpctr checks the email and DNS settings of every domain in scope, explains each result in plain words and tells you what to change.

example.comEmail & DNS checks

SPF lists the senders and rejects the restGood

DMARC p=none: spoofed mail is still deliveredAttention

DNSSEC the domain is not signedAttention

CAA only named authorities may issue certificatesGood

MTA-STS not publishedAttention

TLS-RPT no reporting addressInfo

6 checks · every domain in scopere-checked daily

The checks

Six checks, every domain.

Which servers may send mail for your domain, and what happens to the rest.

Whether spoofed mail is rejected, quarantined or still delivered.

Whether your DNS answers are signed against tampering.

Which certificate authorities may issue certificates for your names.

Whether other mail servers must use TLS to deliver to you.

Where other mail servers report TLS delivery problems.

Why it matters

A domain without a strict DMARC policy lets anyone send mail that looks like yours. The fix is a few DNS records, once you know which.

DMARC policyexample.com

p=noneSpoofed mail is still delivered

p=quarantineSpoofed mail goes to spam

p=rejectSpoofed mail is refused

From report-only to rejectchecked daily

Also

Tell us about your organisation and we will set you up.