Email Security Evaluator
Upload or paste your DNS JSON to evaluate SPF, DKIM, and DMARC against industry benchmarks.
DNS Overall:failSPF: fail•DKIM: fail•DMARC: fail•Headers: fail
Upload JSON
Accepts a JSON export with fields like spf, dkim, dmarc or dnsRecords.
SPF
What you have vs. what's missing vs. benchmark
Current
—
SPF record present
What's missing
- SPF record present — No SPF record found
Benchmark (recommended)
- Single SPF record (no duplicates)
- Includes 'v=spf1' prefix
- Ends with '-all' (hard fail)
- No deprecated 'ptr' mechanism
- <= 10 DNS-mechanism lookups
- No '+all' (never allow all)
DKIM
What you have vs. what's missing vs. benchmark
Current
—
DKIM selector/key present
What's missing
- DKIM selector/key present — No DKIM data found
Benchmark (recommended)
- 2048-bit RSA key
- rsa-sha256 algorithm
- Selector published and rotated periodically
- DKIM aligned with From domain
DMARC
What you have vs. what's missing vs. benchmark
Current
—
DMARC record present
What's missing
- DMARC record present — No DMARC record found
Benchmark (recommended)
- Record present at _dmarc.example.com
- p=reject (or quarantine as interim)
- pct=100
- rua aggregate reporting configured
- adkim=s and aspf=s (strict alignment)
- sp=reject for subdomains (if applicable)
- fo=1 or fo=1:compliant failure reporting
- ri=86400 (daily aggregate interval)
Spam/Blacklist Check (HetrixTools)
Extracted from your headers. Checks IPs and URLs/domains for blacklist mentions.
IPs found
None detected
URLs/domains found
None detected
Domain Age (WHOIS)New
Domains
Registrar Info
Header Deliverability
What you have vs. what's missing vs. benchmark
Current
—
Header data available
What's missing
- Header data available — No headers parsed
Benchmark (recommended)
Note: This tool evaluates provided JSON and can optionally fetch live DNS (TXT). HetrixTools checks require HETRIX_API_KEY. WHOIS requires WHOISXML_API_KEY. Header analysis checks key deliverability factors from email headers.