Email Security Analyzer

Check Domain

Audit SPF, DKIM, DMARC, mail routing and transport security.

Analyzing DNS records...

SPF Inspector

Trace nested includes, identify lookup pressure, and generate a guarded flattening preview.

Resolving the SPF include tree...

Record Builder

Create review-ready SPF records and plan a staged DMARC rollout.

Domain

Authorised email services

Additional mechanismsSpace-separated ip4, ip6, include, a or mx mechanisms.

Policy

Current rollout stage

Confirm every legitimate sending service before publishing. An omitted sender may fail SPF.

Domain

Rollout stage

Policy state (RFC 9989)

Aggregate report mailbox

Subdomain policy

Alignment

Start with monitoring, review aggregate reports, then increase enforcement after legitimate senders align.

Header Analyzer

Interpret receiver-reported authentication, sender alignment, and the delivery chain without overstating certainty.

Complete message headers

🔒Stateless analysis. Headers are sent to this Cloudflare Worker for this request only; this application does not store them. Hop enrichment separately submits up to 10 public IP addresses for PTR lookup.