Free Security Tool

Domain Email Security Audit

Verify your domain's SPF, DKIM, and DMARC records to ensure your emails are protected against spoofing and guaranteed to reach the inbox.

Real Threat. Right Now.

Without Email Security,
Anyone Can Be You.

An unprotected domain is an open invitation. Criminals don't need to hack your systems — they just send emails pretending to be you. Your customers, suppliers and staff have no way to tell the difference.

£2.7bn
Lost to BEC fraud globally in 2023
94%
Of malware is delivered via email
3.4bn
Phishing emails sent every day
75%
Of businesses targeted by phishing

What Attackers Do With an Unprotected Domain

💸

Invoice Fraud

Business Email Compromise

A criminal sends your customer an email from "you" with a new bank account. The customer pays. You never see the money.

🎣

Phishing Your Staff

Internal Phishing

Employees receive emails appearing to come from HR or IT asking for login credentials or urgent bank transfers.

🏢

CEO Impersonation

Whaling Attack

Criminals pose as the company director, urgently requesting wire transfers or sensitive data from finance teams.

📉

Brand Damage

Reputation Destruction

Thousands of spam or scam emails sent from your domain get you blacklisted. Your real emails stop reaching inboxes.

The good news: SPF, DKIM, and DMARC stop all of this.

When all three records are correctly configured, receiving mail servers can verify that emails claiming to be from your domain are actually from you — and reject anything that isn't. It's the single most impactful email security change any business can make.

How Each Record Protects You

SPF, DKIM and DMARC work as a team. Each plays a distinct role and all three are needed for complete protection.

SPF

Think of SPF as your business's guest list. It tells the world exactly which servers are allowed to send emails on your behalf.

DKIM

DKIM is like a wax sealon a physical letter. It attaches a cryptographic signature to every email so servers know it wasn't tampered with.

DMARC

DMARC is the bouncer. It looks at the results from the guest list (SPF) and the wax seal (DKIM) and decides whether to reject or deliver.

Go Deeper

Email security is just the start.

Our full IT Health Check dives deep into your entire technology environment — helping you uncover and reduce the unknown risks that could put your business at risk.

Free · No commitment · Takes 5 minutes