A composite scored report across SPF, DKIM, DMARC, MX, and SSL/TLS. Requires email verification to prevent abuse. Report is also emailed to you for reference.
We sent a 6-digit code to
Code expires in 15:00 · Max 3 attempts
An audit is a snapshot — spoofers show up between audits. DMARCDECK monitors your domain daily: every sender classified, instant threat alerts, plain-language weekly reports, and a guided path to full enforcement. Run the live spoofing test or start 30 days free.
We verify an email address before generating a full audit to prevent abuse (mass scanning of third-party domains) and because the report is delivered to your inbox for reference. No credentials are stored; the verification token is short-lived (30 min) and single-use.