/ Free Tools
Free tools to check and fix your email setup.
Authentication checkers, DNS validators, and deliverability diagnostics — each one runs in your browser, reads your live DNS, and asks for nothing. No signup, nothing sent, no logging. Start with the one that's bugging you.
/ The toolkit
These free tools check the technical foundations that decide whether your email reaches the inbox: the authentication records (SPF, DKIM, DMARC) that prove your mail is legitimate, the brand and transport layers (BIMI, MTA-STS) that add trust, and the diagnostics (blacklist, reverse DNS, headers) that surface problems after something breaks. Each reads your live configuration and tells you, in plain terms, what's right and what to fix.
They're built to be honest and self-contained. Every check runs as a read-only DNS query from your browser, so nothing is sent to us and your domain is never logged. Where a tool can only tell you so much — a record can be valid while real mail still fails — we say so, and point you to the next step. Fixing the record is the start; operating it over time is what managed infrastructure is for.
/ Compliance
Bulk Sender Compliance Checker
Run your domain through the Gmail, Yahoo, and Microsoft 2026 gates and see the exact one that would bounce you with a 550.
Open tool
/ Security
DKIM Key Generator
Generate an RSA or Ed25519 DKIM key pair in your browser — the private key never leaves the page — with a live sign-verify-tamper demo.
Open tool
/ List hygiene
Email List Hygiene Checker
Paste a list and clean it in your browser: syntax, live MX, disposable, role, duplicates, and typo fixes like gmial.com.
Open tool
/ Security
Lookalike Domain Scanner
Generate the typosquat and Unicode-homograph domains that impersonate your brand, and see live which are registered and mail-armed.
Open tool
/ Brand
SVG to BIMI Converter
Paste a normal SVG logo and convert it to BIMI-compliant SVG Tiny P/S — strips scripts, squares the viewBox, adds the title — with a before-and-after preview.
Open tool
/ Authentication
DMARC Checker
Read your live DMARC record, validate the policy, and flag the gaps that cost you inbox placement.
Open tool
/ Authentication
SPF Checker
Validate your SPF record, count DNS lookups against the 10-lookup limit, and catch a missing -all.
Open tool
/ Authentication
DKIM Checker
Look up a DKIM selector, confirm the public key is published, and check the key length.
Open tool
/ Health
Domain Health Scanner
Check SPF, DKIM, DMARC, BIMI, and MTA-STS in a single pass and get one combined verdict.
Open tool
/ Brand
BIMI Generator & Lookup
Check BIMI readiness and generate the DNS record to display your verified logo in the inbox.
Open tool
/ Transport
MTA-STS Validator
Confirm your MTA-STS policy and TLS-RPT reporting are published and enforced correctly.
Open tool
/ Reputation
Blacklist Lookup
Check whether a sending IP or domain appears on the major email blocklists.
Open tool
/ Diagnostics
Reverse DNS Check
Verify a sending IP has valid PTR records and forward-confirmed reverse DNS.
Open tool
/ Diagnostics
Email Header Analyzer
Paste raw email headers and trace the delivery path, authentication results, and hops.
Open tool
/ Why a checker first
What can a free checker tell you, and what can't it?
A checker reads what you've published and tells you whether it's correct. That's genuinely valuable: most deliverability problems start with a record that's missing, malformed, or stuck in a half-deployed state, and a thirty-second lookup catches those before they cost you a campaign. Since Gmail, Yahoo, and Microsoft turned authentication from best practice into a hard requirement, a clean SPF, DKIM, and DMARC setup is the price of admission to the inbox — and a checker confirms you've paid it.
What a checker can't do is tell you whether every real message passes. A record can be flawless while a forgotten sending source quietly fails authentication, because the gap lives in the mail, not the DNS. That's the boundary between checking and verifying, and it's why these tools each point to the next step: the live message test, the aggregate reports, and ultimately the ongoing operation of keeping every source aligned as you add tools and subdomains. The tools find the problem; keeping it fixed is what we do.
The tools find the gaps. We keep them closed.
Checking your records is the easy part. Getting to enforced DMARC and keeping every sending source aligned as you grow is ongoing work — and it's exactly what we operate. Run a check, then bring us what it found.
Book infrastructure reviewRelated capabilities