When Gmail, Yahoo, and Microsoft can't confirm a message really came from your domain, they're far more likely to drop it in the spam folder. We show you the authentication gaps doing the damage, and keep watching so they don't quietly come back.
Every server sending mail as your domain, what it is, and whether it passes the checks that keep mail out of spam. Anything we cannot account for gets flagged.
| Organization | Source IP | Messages | DKIM | SPF | Status |
|---|---|---|---|---|---|
| Google LLC209.85.220.4112,037 messages · DKIM 100% · SPF 100% | 209.85.220.41 | 12,037 | 100% | 100% | Aligned |
| Google LLC209.85.220.693,903 messages · DKIM 100% · SPF 100% | 209.85.220.69 | 3,903 | 100% | 100% | Aligned |
| SendGrid, Inc.149.72.123.242,708 messages · DKIM 100% · SPF 0% | 149.72.123.24 | 2,708 | 100% | 0% | Aligned |
| Microsoft Corporation40.107.220.121,573 messages · DKIM 100% · SPF 100% | 40.107.220.12 | 1,573 | 100% | 100% | Aligned |
| SendGrid, Inc.149.72.98.110926 messages · DKIM 100% · SPF 0% | 149.72.98.110 | 926 | 100% | 0% | Aligned |
| Unknown provider185.234.72.19685 messages · DKIM 0% · SPF 0% | 185.234.72.19 | 685 | 0% | 0% | Suspicious |
Sample data for a fictional business. Open the live demo to click through the whole dashboard, or run the free check above on your own domain.
Run your domain through the free checker. In plain English, it shows whether your domain has the records that prove its mail is really yours, what they're set to, and the fix for anything missing. Sixty seconds, no signup.
If there's a gap, we hand you the exact one-line fix, written plainly enough to paste in yourself or forward to your IT person. Rather not touch it? We'll do the whole thing for you for $499, one time.
Authentication doesn't stay fixed. Add a new invoicing tool, change providers, let a key lapse, and your mail quietly slides back toward spam. We read the reports Gmail, Microsoft, and Yahoo send about your domain every day, and tell you in plain English the day something breaks.
Three patterns we see often, written as illustrative examples.
An accounting firm had billed the same way for years. Then clients started paying late, not because they wouldn't, but because the invoices were landing in spam. Nothing had changed on the firm's end. Providers had simply grown warier of mail they couldn't confirm was really from the firm.
The fix
Set the domain up to prove its mail is its own, so it stops getting filed as suspect.
A consultant couldn't work out why her proposals got no reply. They were landing in client spam, not inboxes. Her domain had never been set up to vouch for her mail, so some providers treated it as unverified and quietly set it aside. She found out from a client who went looking.
The fix
Tell the major providers which senders are legitimate, so her real mail stops looking like a stranger's.
A law firm's client got wiring instructions that looked exactly right: the firm's letterhead, a partner's signature, the firm's real domain in the From line. The client sent the money. The firm never sent the email. Nothing on the domain stopped an outsider from sending as the firm, so there was nothing for the client to catch.
The fix
Lock the domain down so a message that isn't really from the firm fails on arrival instead of reaching the inbox.
From $19 a month. Authentication drifts, so we keep watching.
$19/mo
1 domain. Daily monitoring. Plain-English alerts.
Start free trial$49/mo
Up to 5 domains. Daily monitoring. Plain-English alerts. Approved-sender governance. Hosted SPF.
Start free trial$149/mo
Up to 25 domains. Daily monitoring. Plain-English alerts. Approved-sender governance. Hosted SPF. Multi-user access.
Start free trialRather hand it off? For a one-time $499, I inventory the services sending as your domain, fix SPF, DKIM, and DMARC in stages with your approval before each change, and monitor authentication for at least 30 days. Ask about done-for-you →
No, because it goes in steps. The first step only turns on reporting and changes nothing about how your mail is delivered. The rule that turns away fake mail goes on after the reports show your real senders passing, so your own mail doesn't get caught by it. If you have unusual senders we don't know about (an old marketing tool, a contractor's CRM), we'll show you before anything changes.
No. DMARC is the technical name for the standard; you don't need to know how it works. We translate everything into plain English: who's sending mail as your domain, whether they're legitimate, and what to do about anything that isn't.
The record itself takes about 20 minutes to publish, and the first reports on your mail arrive within a day or two. Turning away forgeries comes after that, usually within a few weeks: we watch what your real senders look like first so none of your own mail gets caught by mistake.
Starter covers 1, Pro covers 5, Team covers 25. Most businesses we work with have a primary domain and 2-3 marketing or product domains. We monitor all of them under one account.
Yes. Month-to-month, no contract. If you cancel, you keep the DNS records you put in place; your protection doesn't go away, you just stop getting our monitoring and alerts.