We check SPF, DKIM, DMARC, STARTTLS, and email blacklists — then send you a detailed report with issues found and exactly how to fix them.
Email security means configuring your domain so receiving servers can verify that emails claiming to be from you are legitimate. This involves DNS records (SPF, DKIM, DMARC) that authenticate senders, encrypted transport (STARTTLS), and keeping your sending reputation clean (blacklist monitoring).
Without proper email security, anyone can send fake emails that look like they come from you. Clients receive fraudulent invoices, employees act on phishing requests, and your emails land in spam folders. Google and Yahoo now require these protections for reliable delivery.
Our audit checks MX records, SPF enforcement policy, DKIM signing keys, DMARC handling rules, STARTTLS support on your mail servers, and your blacklist reputation across 6 major blocklists. You get a score, a list of issues, and step-by-step fixes.
Every check maps to a real security risk
Verifies your domain has mail servers configured to receive email. Missing MX means lost messages.
Checks which servers are authorized to send from your domain. Prevents sender forgery.
Confirms emails are cryptographically signed in transit. Required by Google & Yahoo.
Controls what happens to unauthenticated email. Without it, spoofers go unchecked.
Checks if email in transit is encrypted. Without it, anyone on the network can read your messages.
Scans 6 major blocklists for your IPs. Getting blacklisted kills email deliverability.
Enter your domain name and email address above.
Our automated system checks DNS records, connects to your mail servers, and queries blacklists.
Your custom report arrives by email — score, issues found, and how to fix each one.
A full email security audit with DNS, encryption, and blacklist scores
Your report includes full details — schedule a call to review everything.
Covered On can fix email security gaps, configure SPF/DKIM/DMARC, clean blacklist listings, and harden your mail servers. Typically resolved within 1-2 business days.
Talk to us about fixesWe check MX records, SPF (including whether enforcement is active), DKIM (multiple selectors), DMARC policy, STARTTLS support on your mail servers, and 6 major DNS blacklists. You get a numerical score, sub-scores for DNS/encryption/blacklists, a prioritized list of issues, and step-by-step remediation instructions.
Most audits complete within 10 seconds. We'll email you a link to your report as soon as it's ready.
Just your domain name and an email address to receive the report. No passwords, no access to your email account, no credit card.
We only use the submitted domain to generate the audit. Reports are stored for 30 days and then deleted. We do not sell or share your information.
SPF alone tells receiving servers what IPs are authorized, but without DKIM and DMARC, attackers can still spoof your domain. DMARC tells servers what to do with unauthenticated email, and DKIM ensures content hasn't been tampered with. All three are needed for full protection and reliable delivery, especially to Google and Yahoo.