Free tools

Each tool runs the same diagnostic engine, focused on one record type. No account, no email address, and the full result every time.

Checkers

• Full domain health checkCheck SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT and BIMI for any domain in one pass, with the exact records and the fix for anything that is wrong.
• SPF checkerLook up a domain's SPF record, validate its syntax, and count the DNS lookups it costs — including every nested include — against the limit of ten.
• DMARC checkerLook up and validate a domain's DMARC record, read back what its policy actually does, and see what is needed to move to enforcement.
• DKIM checkerCheck a DKIM selector for a domain, validate the record, and read the key strength. Leave the selector blank to probe the selectors common providers use.
• MX lookupList a domain's mail exchangers and priorities, confirm each resolves to a reachable address, and catch the misconfigurations that break inbound mail.
• MTA-STS checkerCheck a domain's MTA-STS record, fetch its policy file, and confirm the policy covers every mail exchanger the domain actually publishes.
• BIMI checkerCheck a domain's BIMI record and confirm the DMARC policy meets the enforcement requirement that BIMI depends on.

Generators

• SPF record generatorBuild a valid SPF record from the services you actually send with, with the DNS lookup cost calculated as you go so you do not exceed the limit.
• DMARC record generatorBuild a valid DMARC record with the policy, reporting address and alignment you want, and understand what each choice does before you publish it.