Free DMARC checker
See whether your domain enforces email authentication or only monitors abuse.
DMARC at p=none still lets spoofed messages through. RedScore checks public DMARC, SPF, and related email auth signals on your domain in about 60 seconds. Go to /lookup and enter the domain you send mail from.
Scan your domainFree scan · No signup · Results in ~60 seconds · Opens /lookup
example-corp.com
✓ scan complete · grade D · 4 issues
AI summary
DMARC enforcement is missing, which leaves spoofing open. SPF is too permissive. Several key web security headers are absent.
Why DMARC matters
Questionnaires and deliverability checks often start with DMARC and SPF posture. RedScore shows whether your domain is monitoring only or actually enforcing policy.
Built for email operators
One scan covers DMARC enforcement, SPF strength, DKIM signals, and the rest of your public footprint.
See whether policy is none, quarantine, or reject from public records.
SPF strength and lookup-limit signals on the same domain.
Plain English on what failed and what to change in DNS.
Email auth grades sit alongside DNS, TLS, and headers in one RedScore.
What you get
You get email category grades, a 0-100 RedScore, and a prioritized fix list across ten public security areas.
63 / 100
Grade C
example-corp.com
AI summary
Cookie settings are weak and server headers reveal stack details. Email spoofing is plausible with incomplete SPF and DMARC.
What RedScore checks today
This is not mailbox deliverability testing or a full phishing simulation. It checks public DNS email authentication records visible from the outside.
After the free scan
Anonymous scans show safe summary grades. Claim the domain to unlock record-level DMARC and SPF detail plus scheduled rescans.
FAQ
