Email security scanner
Enter a domain to see how well it is protected against spoofing, in about ten seconds. No sign-up. We read public DNS records and nothing else.
Keep your domain on your radar
A one-time check shows today. Pistos DMARC report monitoring is still being built. Create a free account now to hold your place and add your domain when it opens.
Questions
What does the score mean?
It adds points for what protects against spoofing: an enforced DMARC policy counts most, then valid SPF and DKIM, then transport security and a clean reputation. The same records always give the same score.
Why does the DKIM check say it found nothing?
DKIM keys are published under a selector name chosen by each sender, so they cannot be listed from outside. We try the names large providers use. If your mail is signed under a custom name, check it by name with the DKIM checker.
Does a good score mean my mail is safe?
It means the records that tell receivers how to treat forged mail are in place. DMARC does not stop phishing from look-alike domains or from compromised accounts.