RedScore.ai

Free DKIM checker

Check DKIM on your domain before deliverability drifts

Validate public DKIM signals alongside DMARC and SPF in one scan.

Broken DKIM breaks alignment and weakens spoofing defenses. RedScore discovers common public DKIM selectors and checks validation signals on your domain. Start at /lookup with the domain you send mail from.

Scan your domain

Free scan · No signup · Results in ~60 seconds · Opens /lookup

example-corp.com

✓ scan complete · grade D · 4 issues

42/ 100
Grade D

AI summary

DMARC enforcement is missing, which leaves spoofing open. SPF is too permissive. Several key web security headers are absent.

FAILDMARC enforcement
FAILSPF policy strength
WARNWeb headers & TLS hardening
WARNCookie secure flag
PASSGoogle Safe Browsing

Why DKIM checks matter

Mail providers expect aligned DKIM, DMARC, and SPF

DKIM problems often show up as deliverability drops long before security teams notice. RedScore checks public DKIM signals so you can fix DNS before campaigns or customer mail suffer.

Built for senders

DKIM signals inside a full email pass

One outside-in scan covers DKIM, DMARC, SPF, and the rest of your public domain posture.

Selector discovery

Public DKIM selector discovery signals on your domain.

Key validation

DKIM key validation checks visible from the outside.

Aligned fixes

See DKIM issues in context with DMARC and SPF on the same report.

One domain scan

Email auth plus DNS, TLS, headers, and exposure in about 60 seconds.

What you get

DKIM grades with full email context

RedScore returns email category grades, a 0-100 score, and fix-first guidance across your public footprint.

C62DNS & Domain Security
D48Email Security
B75Infrastructure Hygiene
C68Web Application Security
F32Cookie & Privacy Hygiene
D45Technology Fingerprinting
B78Public Exposure
A91Certificate & PKI Health
B82Brand & Domain Reputation
C55Third-Party Risk Surface
63/ 100
Grade C

63 / 100

Grade C

example-corp.com

AI summary

Cookie settings are weak and server headers reveal stack details. Email spoofing is plausible with incomplete SPF and DMARC.

Email auth gaps
Header hardening
Certificate hygiene

What RedScore checks today

Public DKIM and email auth signals

  • DKIM selector discovery on the domain
  • DKIM key validation signals
  • DMARC policy and reporting posture
  • SPF record presence and strength
  • MX hygiene and related mail DNS records

What this does not replace

This is not a mailbox seed test or ESP console audit. It checks public DKIM and DNS signals visible from the internet.

After the free scan

Claim your domain for full DKIM detail

Free scans show summary grades. Claim the domain to unlock selector-level findings and monitoring.

  • Full email authentication finding detail
  • Scheduled scans and change alerts
  • Track DKIM and DMARC fixes over time

FAQ

Common questions

Check DKIM on your domain

Free scan · No signup · ~60 seconds

Scan your domain