Domain Health Scanner
Check any domain's email authentication setup — SPF, DKIM, DMARC, and MX records — in seconds.
About this tool
The Domain Health Scanner performs a comprehensive check of your domain's email authentication DNS records. It queries SPF, DKIM, DMARC, and MX records in real time and validates each one against industry best practices defined by RFC 7208 (SPF), RFC 6376 (DKIM), and RFC 7489 (DMARC).
Each scan produces a transparent 0-100 compliance score. The scanner identifies critical errors such as missing records, syntax issues, and misconfigured policies, as well as warnings for suboptimal settings that could affect deliverability. Every finding includes a plain-language explanation and a recommended fix so you know exactly what to change.
This tool is ideal for domain administrators, IT teams, and email marketers who want a quick health check before sending campaigns or after making DNS changes. For ongoing protection, consider signing up for Inbox Insignia's Starter plan to get automated weekly scans, email alerts, and a clear compliance baseline that can be upgraded to daily scans and faster drift detection as your monitoring needs grow.
Frequently Asked Questions
What does the domain health scanner check?
The scanner checks your domain's SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), DMARC (Domain-based Message Authentication, Reporting & Conformance), and MX (Mail Exchange) records. It validates each record against best practices and produces a 0-100 compliance score with actionable recommendations.
Is this tool free?
Yes, the domain health scanner is completely free to use. No sign-up or account is required. Simply enter your domain name and get instant results. For continuous monitoring, drift detection, and alerting, Starter and Growth include a 14-day free trial.
How is the compliance score calculated?
The compliance score starts at 100 and deducts points for errors and warnings found during the scan. Critical issues like a missing DMARC record or an invalid SPF syntax result in larger deductions, while minor issues like suboptimal DMARC policy settings result in smaller deductions. A score of 80 or above generally indicates a well-configured domain.
How often should I check my domain?
DNS records can change unexpectedly due to misconfigurations, provider migrations, or unauthorized modifications. We recommend checking your domain after any DNS change and at least once a month for peace of mind. For hands-free monitoring, Inbox Insignia offers scheduled scans with weekly posture checks on Starter and daily checks plus faster drift detection on higher plans.