See a domain's real
email security posture
Run a deep assessment across SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT, including subdomains, real TLS checks, and wide DKIM-selector probing. Get a clear score and a prioritized list of what to fix, in minutes.
The assessment that starts the conversation
A complete, defensible read on a domain's email security, the kind you can put in front of a prospect, a client, or a board.
The whole stack, in one scan
SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT checked together, so you see the full email security posture of a domain, not a single record in isolation.
Deep, not surface-level
We check subdomains, test real TLS connections, and probe a wide range of DKIM selectors, catching the gaps a quick lookup tool quietly misses.
A clear score and the gaps
Every assessment ends with a plain-language posture score and a prioritized list of what to fix first, something you can hand to a client or an exec as-is.
Built for prospecting and reviews
MSPs use assessments to show a prospect exactly where they stand, then to run clean quarterly reviews with clients. A gap is a conversation, and a conversation is a deal.
When an assessment surfaces gaps, the next step is usually Managed Compliance to move the domain to enforcement, or a free audit to confirm the path first. MSPs can fold assessments into the MSP partner program to win and keep clients.
Common questions
What does the email security assessment scan?
It checks the full email authentication stack together: SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT. The assessment also covers subdomains, tests real TLS connections, and probes a wide range of DKIM selectors, so you see the whole posture of a domain rather than a single record in isolation.
How is this different from a quick DNS lookup tool?
A quick lookup reads one record at a time. This assessment goes deeper: it inspects subdomains, makes real TLS connections instead of assuming them, and probes many DKIM selectors to catch signing gaps a surface-level tool quietly misses.
What does the posture score mean?
Every assessment ends with a plain-language posture score and a prioritized list of what to fix first. The score summarizes how complete and correct the domain's authentication setup is, and the gap list tells you the order to address issues in. You can hand both to a client or an exec as they are.
Who is the assessment built for?
It is built for MSPs prospecting and running client reviews, and it is available on our paid MSP plan. An assessment shows a prospect exactly where they stand, and it gives you a clean, repeatable way to run quarterly reviews with existing clients.
What happens after I find gaps in a domain?
A gap is the start of a conversation. From there you can move the domain toward enforcement with Managed Compliance, or begin with a free audit to confirm the path and the fixed price. You keep control of DNS the entire way.
Turn a security gap into a conversation
See what a full email security assessment surfaces on a real domain. Book a demo, or explore how MSPs use assessments to win and keep clients.