Free tool · Email spoofing check
Could someone send email as you?
Criminals fake emails from real businesses to trick customers and staff. Enter your business domain to see if yours is protected.
We only read public internet records. Nothing you type is stored.
Checking public records…
What we check
SPF
A public list of the servers allowed to send email for your domain. Without it, anyone can claim to be you.
DMARC
Tells inboxes what to do with fake emails using your name: deliver, quarantine or reject them.
Email server
Whether your domain receives email, and which provider runs it, so we can tailor the fix.
Spoofing is one gap. What about the rest?
The full readiness report checks your domain automatically, plus all five Cyber Essentials controls and UK GDPR, with fixes for the apps you use.