Free SPF checker
Validate public SPF records and policy strength in about 60 seconds.
Weak or bloated SPF records break deliverability and spoofing defenses. RedScore checks SPF presence, policy strength, and lookup-limit signals on your domain. Go to /lookup and enter the hostname you send mail from.
Scan your domainFree scan · No signup · Results in ~60 seconds · Opens /lookup
example-corp.com
✓ scan complete · grade D · 4 issues
AI summary
DMARC enforcement is missing, which leaves spoofing open. SPF is too permissive. Several key web security headers are absent.
Why SPF checks matter
Too many includes, missing records, and softfail-only policies show up in external reviews. RedScore surfaces SPF gaps alongside DMARC and DKIM on the same domain scan.
Built for domain owners
One /lookup pass covers SPF, DMARC, DKIM, and nine other public security areas.
Presence and policy strength from public DNS.
SPF lookup-count risks visible from the outside.
Plain English on what to change in DNS.
See SPF issues in context with DMARC and DKIM grades.
What you get
You get email category grades, a 0-100 RedScore, and prioritized fixes across your public domain posture.
63 / 100
Grade C
example-corp.com
AI summary
Cookie settings are weak and server headers reveal stack details. Email spoofing is plausible with incomplete SPF and DMARC.
What RedScore checks today
This is not a mailbox deliverability lab test. It checks public SPF and related DNS records visible from the internet.
After the free scan
Anonymous scans show summary grades. Claim the domain to unlock record-level SPF findings and monitoring.
FAQ
