100% free · no obligationPlain-English report

Can someone send email pretending to be your business?

For most businesses, the answer is yes, and they have no idea. We'll check your domain's email security for free and send you a plain-English report on exactly what's exposed.

We've been quietly checking local businesses, and most are wide open, often without their current IT provider ever flagging it.

Run my free check ↓
6
Areas we check
15 min
All it takes from you
£0
Cost (genuinely)
Check your domain in 20 seconds

Enter your work email. We'll check your live email security and show you exactly what's exposed, in plain English.

We use your email to run the check and to handle your enquiry. We won't share it with anyone else or add you to marketing unless you tick above. See our privacy policy.

What the report covers

Six checks. One clear verdict.

These are the settings that decide whether criminals can impersonate your domain, and whether your real email reaches the inbox. New to the terms? Start with our plain-English guide to SPF, DKIM & DMARC.

🛡️
SPF
Sender Policy Framework: the list of servers allowed to send email from your domain.
What it means for you
Missing or wrong, and anyone can send email as you. Your own emails are also more likely to land in spam.
✍️
DKIM
A tamper-proof digital signature added to every email you send.
What it means for you
Without it, messages can be altered in transit and receivers can't confirm they're genuinely from you.
🚫
DMARC
The policy that tells the world what to do with fakes, and reports who is sending in your name.
What it means for you
The one that actually blocks impersonation. Most businesses either don't have it, or have it on 'monitor only', which blocks nothing.
📧
Email platform
Whether you run Microsoft 365, Google Workspace, or mail off a web server, and how it is configured.
What it means for you
Each platform has its own common misconfigurations. We check yours against current best practice.
🔒
MTA-STS
A rule that forces email sent to your domain to travel encrypted.
What it means for you
Stops attackers intercepting or downgrading your email in transit. Almost nobody has this set up.
🌐
DNSSEC
Cryptographic protection for your DNS records themselves.
What it means for you
Stops criminals forging your DNS to hijack your email or your website.
How it works

Three steps. Nothing to install.

01
Tell us your domain
A quick 15-minute call, no prep needed. We just need the web address you send email from.
02
We run the checks
We test your live DNS and mail setup against all six areas above. Read-only, so we change nothing.
03
You get the report
Plain English: what's exposed, what it means, and what to fix first. Yours to keep, whatever you decide next.

Worried email fraud is already happening? See what to do about business email compromise, or read why this is the foundation of Cyber Essentials.

Find out where you stand

Get your free email security check

Book a 15-minute call. We'll run the checks and send your report. No sales script, no obligation.

Prefer to talk? Call 01584 517 234.

Last reviewed May 2026 · Sam James