--- title: "Email Security Assessment: Scan a Domain's Full Posture | DMARC Report" description: "A deep email security assessment: SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT across a domain and its subdomains, with real TLS checks and wide DKIM-selector probing. A clear score and prioritized gaps, built for MSP prospecting and client reviews." image: "https://dmarcreport.com/images/og-default.png" canonical: "https://dmarcreport.com/email-security-assessment/" --- Email Security Assessment # See a domain's real email security posture Run a deep assessment across SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT, including subdomains, real TLS checks, and wide DKIM-selector probing. Get a clear score and a prioritized list of what to fix, in minutes. [ Book a Demo → ](/book-a-demo/) [ For MSPs ](/msp-partner-program/) What You Get ## The assessment that starts the conversation A complete, defensible read on a domain's email security, the kind you can put in front of a prospect, a client, or a board. ### The whole stack, in one scan SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT checked together, so you see the full email security posture of a domain, not a single record in isolation. ### Deep, not surface-level We check subdomains, test real TLS connections, and probe a wide range of DKIM selectors, catching the gaps a quick lookup tool quietly misses. ### A clear score and the gaps Every assessment ends with a plain-language posture score and a prioritized list of what to fix first, something you can hand to a client or an exec as-is. ### Built for prospecting and reviews MSPs use assessments to show a prospect exactly where they stand, then to run clean quarterly reviews with clients. A gap is a conversation, and a conversation is a deal. When an assessment surfaces gaps, the next step is usually [Managed Compliance](/managed-compliance/) to move the domain to enforcement, or a [free audit](/free-audit/) to confirm the path first. MSPs can fold assessments into the [MSP partner program](/msp-partner-program/) to win and keep clients. FAQ ## Common questions What does the email security assessment scan? It checks the full email authentication stack together: SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT. The assessment also covers subdomains, tests real TLS connections, and probes a wide range of DKIM selectors, so you see the whole posture of a domain rather than a single record in isolation. How is this different from a quick DNS lookup tool? A quick lookup reads one record at a time. This assessment goes deeper: it inspects subdomains, makes real TLS connections instead of assuming them, and probes many DKIM selectors to catch signing gaps a surface-level tool quietly misses. What does the posture score mean? Every assessment ends with a plain-language posture score and a prioritized list of what to fix first. The score summarizes how complete and correct the domain's authentication setup is, and the gap list tells you the order to address issues in. You can hand both to a client or an exec as they are. Who is the assessment built for? It is built for MSPs prospecting and running client reviews, and it is available on our paid MSP plan. An assessment shows a prospect exactly where they stand, and it gives you a clean, repeatable way to run quarterly reviews with existing clients. What happens after I find gaps in a domain? A gap is the start of a conversation. From there you can move the domain toward enforcement with Managed Compliance, or begin with a free audit to confirm the path and the fixed price. You keep control of DNS the entire way. ## Turn a security gap into a conversation See what a full email security assessment surfaces on a real domain. Book a demo, or explore how MSPs use assessments to win and keep clients. [Book a Demo→](/book-a-demo/)[For MSPs](/msp-partner-program/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"473","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"WebPage","name":"Email Security Assessment: Scan a Domain's Full Posture | DMARC Report","description":"A deep email security assessment: SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT across a domain and its subdomains, with real TLS checks and wide DKIM-selector probing. A clear score and prioritized gaps, built for MSP prospecting and client reviews.","url":"https://dmarcreport.com/email-security-assessment/","isPartOf":{"@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com"}}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Features","item":"https://dmarcreport.com/features/"},{"@type":"ListItem","position":3,"name":"Email Security Assessment","item":"https://dmarcreport.com/email-security-assessment/"}]} ``` ```json {"@context":"https://schema.org","@type":"FAQPage","mainEntity":[{"@type":"Question","name":"What does the email security assessment scan?","acceptedAnswer":{"@type":"Answer","text":"It checks the full email authentication stack together: SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT. The assessment also covers subdomains, tests real TLS connections, and probes a wide range of DKIM selectors, so you see the whole posture of a domain rather than a single record in isolation."}},{"@type":"Question","name":"How is this different from a quick DNS lookup tool?","acceptedAnswer":{"@type":"Answer","text":"A quick lookup reads one record at a time. This assessment goes deeper: it inspects subdomains, makes real TLS connections instead of assuming them, and probes many DKIM selectors to catch signing gaps a surface-level tool quietly misses."}},{"@type":"Question","name":"What does the posture score mean?","acceptedAnswer":{"@type":"Answer","text":"Every assessment ends with a plain-language posture score and a prioritized list of what to fix first. The score summarizes how complete and correct the domain's authentication setup is, and the gap list tells you the order to address issues in. You can hand both to a client or an exec as they are."}},{"@type":"Question","name":"Who is the assessment built for?","acceptedAnswer":{"@type":"Answer","text":"It is built for MSPs prospecting and running client reviews, and it is available on our paid MSP plan. An assessment shows a prospect exactly where they stand, and it gives you a clean, repeatable way to run quarterly reviews with existing clients."}},{"@type":"Question","name":"What happens after I find gaps in a domain?","acceptedAnswer":{"@type":"Answer","text":"A gap is the start of a conversation. From there you can move the domain toward enforcement with Managed Compliance, or begin with a free audit to confirm the path and the fixed price. You keep control of DNS the entire way."}}]} ```