Skip to content
Unsolicited Outreach

Free tools

Two checks you can run right now, written for people who don't run a mail server. Nothing you enter is stored.

  • Domain report card

    Enter a domain and see its SPF, DKIM, DMARC, MX, DNSSEC, and MTA-STS records graded in plain English, with what each gap lets a stranger do and how to close it.

    Reads public DNS only. Never connects to your servers.

  • Header decoder

    Paste the headers from any email and find out who really sent it, which checks it passed, and the route it took to your inbox.

    Decoded in your browser. The headers never leave your device.