Email Security

Check your domain's
email security.

Inspect mail authentication, DNS policy and message headers. Get the evidence and next steps in a shareable report.

Domain postureSPF, DKIM, DMARC, MX and transport, single or batch
SPF engineeringLookup paths, validation and flattening preview
Message evidenceAuthentication results, delivery hops, shareable reports
SPF, DKIM, DMARC, MX, transport No login required Results cached up to 5 minutes
How this tool works

Diagnostic principles

01

Observed, not guessed

Every conclusion points back to captured DNS records or receiver-reported authentication results.

02

Clear boundaries

Header analysis reflects what the receiver reported, not an independent re-evaluation of the message.

03

Headers aren’t stored

Pasted headers are not saved as shareable reports. They are interpreted in memory for this request only.

API and integrations

Automate the complete email-security toolkit

Run domain and batch checks, inspect or evaluate SPF, build and validate guarded records, analyze headers, enrich hops, and retrieve reports.

Request limits apply. If you reach a limit, the response tells you when to retry.

REST APIOpenAPI contract and examples
MCP endpoint · 9 toolsemail.illek.ie/mcp/v2
Copilot connectorImport-ready MCP definition

What this tool measures

DNS

DNS observation

SPF, DKIM, DMARC, MX, and CAA records resolved via DNS-over-HTTPS. Transport security checks MTA-STS and TLS-RPT policies. Batch checks compare up to 3 domains.

HDR

Header evidence

Header analysis parses Authentication-Results claims, Received-SPF results, DKIM-Signature field shape, message addresses, and Received hops. It does not independently verify a DKIM signature or re-run authentication.

ƒ(x)

Derived finding

Interpretation of DNS records and header evidence, with recommendations grounded in published RFCs and current best practice. Shared reports can be read for up to 14 days when you opt in; expired rows are removed by an hourly cleanup, and expired or revoked links stop working immediately.

This tool does not test deliverability, send email, or probe private infrastructure. DKIM selector discovery is best-effort and may not find all active selectors.