Free tool / Domain monitor
Know the day your email security breaks.
We check your domain’s SPF, DKIM, DMARC and mail servers every day, scan for new lookalike domains every week, and email you only when something changes.
Watch a domain
What we watch
- DMARC
- Record removed, policy weakened (reject → none), reports switched off.
- SPF
- Record removed or edited, or the lookup count crossing the limit of 10.
- DKIM
- A signing key that can no longer be found, or a new one published.
- Mail servers
- MX records changed or removed: where your email is delivered.
- Hardening
- DNSSEC, CAA, MTA-STS, TLS-RPT and BIMI switched on or off.
- Lookalikes
- Weekly: newly registered domains that imitate yours.
Not sure where you stand today? Run the free check first — it takes a few seconds and shows the exact fix for anything missing.
Questions people ask
Why monitor DMARC, SPF and DKIM at all?
Email authentication breaks quietly. A DNS migration drops the DKIM key, someone edits SPF and crosses the 10-lookup limit, a new provider replaces the DMARC record with p=none. Mail starts landing in spam, or forged mail in your name starts getting through — and nobody notices for weeks.
How often do you check, and when do you email?
Once a day for the records, once a week for lookalike domains. You get an email only when something changes, and only after two checks at least an hour apart agree, so a slow DNS resolver can’t cause a false alarm.
Is it really free?
Yes: one domain per email address, no account. The full check, bulk check and the other tools stay free too.
What do you store?
Your email address, the domain and the latest results of its public DNS check, so we can tell what changed. Stop monitoring from any alert and the address and domain are erased at once.