Find out in 5 seconds why your email lands in spam.
Free SPF, DKIM and DMARC check for any domain, with plain-English fixes ranked by impact. Then let MailAuthWatch re-check your domains every day and alert you before a DNS change breaks deliverability.
Public DNS only. No signup for the free check. Try github.com, stripe.com or vercel.com.
SPF with real lookup counting
Recursively resolves every include: and redirect=, counts DNS lookups against the RFC 7208 limit of 10, flags void lookups, +all, and deprecated ptr.
DKIM key discovery
Probes 70+ selectors used by Google, Microsoft, SendGrid, Mailchimp, HubSpot, Zendesk and more. Reports key length, revoked keys and testing mode, and lets you add your own selectors.
DMARC that means something
Validates the policy, percentage, subdomain policy and alignment, and checks that external report addresses have authorised your domain so reports are not silently dropped.
Why monitor, not just check
Records drift
Every new SaaS tool asks for an SPF include. The eleventh one silently breaks SPF for everything. Marketing rotates a DKIM key. An IT contractor edits DMARC. Nobody notices until customers stop replying.
Daily re-checks, instant alerts
Each domain is re-measured every day. Any change in grade, record text, lookup count, policy or DKIM key presence triggers an email and, on the Agency plan, a webhook to Slack or your own endpoint.
Built for agencies and IT teams
Monitor 10 or 50 client domains from one dashboard, keep a history of every record, and pull JSON from the API to put a grade in your own client reports.
Start monitoring today
Starter is $29/month for 10 domains. Agency is $79/month for 50 domains with API and webhooks. Cancel any time from the billing portal.
See pricingRecently graded domains
Public checks run in the last few days. Every report is measured live from DNS when it is opened.