Spoofing protection
Whether a DMARC record tells inboxes to reject email that fakes your address. Without it, a fake invoice can look like it came from you.
Free tool
Type your business website or work email. In about ten seconds you get a grade for your email and domain security, with every result explained in plain words. It only reads public records.
Everything here is public, the same records any mail server or scammer can see.
Whether a DMARC record tells inboxes to reject email that fakes your address. Without it, a fake invoice can look like it came from you.
Whether your SPF record lists the services allowed to send as you, and ends the way it should.
Whether DKIM signing is set up, so receiving servers can tell your real email from a copy.
When your domain and website certificate expire, whether the domain is locked against transfers, and the basic browser protections on your site.
The most common way small businesses lose money to criminals is an email that asks to change where a payment goes. When your domain can be spoofed, that email can come from your own address.
Gmail and Yahoo now expect businesses that send email to have these records in place, and cyber insurers check them from the outside before they quote. Most fixes are a short visit.
No. It reads public DNS records, the domain registry, and the front page of your website, the same things anyone on the internet can see.
If you ask for the full report, we email it to you and send a few short follow ups over three weeks, then stop. Every email has an unsubscribe link.
Most email fixes are part of our Microsoft 365 setup, from $1,200 for up to 10 people. An office checkup is $350 and looks at everything once, and it is credited once toward a fixed-price project or care plan onboarding signed within 30 days.
Three fields. You hear back the same business day by text or email, whichever you give us.
Tell us what's bugging you. In 15 minutes you'll know what it takes to fix and roughly what it costs.