Free domain check
Can anyone send email as your firm?
Most regulated firms can be impersonated by email and do not know it. Enter your domain and we’ll show you where you stand on the things anyone can check from the outside, the same checks behind our research on 1,608 FCA-authorised firms.
Public records only, DNS and one ordinary web request, the same a mail server or browser already sees. Nothing is sent to your mail servers.
What we check, and what we don’t
We look at four things any mail server or browser already sees: your DMARC record (whether forged email from your address is stopped), your SPF record (who is allowed to send as you), whether your site completes a secure HTTPS connection, and your security headers. Every check is a public DNS lookup or one ordinary web request. We send nothing to your mail servers, test no logins and scan no ports. It is a read of what you already publish, not an attack, and not the whole of your security, just the parts visible from outside.