Check 9 / 16 LOW impact Free
Domain email DNS SPF / DKIM / DMARC setup
What this check is
Without SPF, DKIM and DMARC the transactional mail lands in spam and the domain becomes spoofable. This is the difference between a customer reading their order confirmation and never seeing it.
How to implement it
Add the SPF record for every service that sends mail on the domain, publish the DKIM keys from the email host as TXT records, and set a DMARC TXT record starting with p=none and a reporting address before moving to quarantine. Keep one SPF record per domain: flattening multiple includes is the usual failure.
How to verify it
Send a test message to a Gmail address and use Show original to check SPF=pass and DKIM=pass with the correct domain, then read the DMARC aggregate report after a few days to confirm alignment.
This one is in the free tier
The free tier covers the first checks of every category — enough to close the obvious leaks. The full checklist adds the priority order, the impact score and the tool link for all 197 checks across 14 categories.
$19 $197 one-time · 30-day money-back guarantee
Unlock 179 checks — $19