Free domain email-security checker

Spamless offers a free, no-signup tool to check any domain's inbound email-security posture: spamless.dev/check.

What it checks

You enter a domain (e.g. example.com) and we look up its public DNS records and grade them:

• MX — is mail configured?
• SPF — is sender authentication present and restrictive (does it end in -all / ~all)?
• DMARC — is anti-spoofing enforced (p=quarantine / p=reject) or only monitoring (p=none)?
• MTA-STS — is its public TXT indicator present? The checker does not verify the HTTPS policy or actual TLS enforcement.

What you get

• An overall letter grade (A–F) and score (0–100) — A from 90, B from 75, C from 55, D from 35, F below that.
• A per-check breakdown (pass / warning / fail) with plain-language recommendations on what to fix.

Privacy & limits

• It reads public DNS records only — no mail is sent, received or stored, and the tool needs no account.
• Results are cached for about an hour, so re-running a check right after a DNS change may still show the previous result.
• It's rate-limited (a handful of checks a minute per visitor) to keep it fair for everyone.

Why it matters

Missing or weak sender-authentication records can make domain spoofing easier. The checker highlights DNS settings to review. Your hosting provider can help validate changes; filtering and successful mail delivery require their own setup checks.

For the background, see SPF, DKIM & DMARC explained.

Continue with setup

Use the checker page's setup link to continue with the domain you examined. Eligible accounts can start a card-free pilot, then follow Quick start and the cPanel or Plesk recipe. A DNS score describes the checked records; it does not certify filtering accuracy or successful mail delivery.