Skip to content

/ Free Tools

Free tools to check and fix your email setup.

Authentication checkers, DNS validators, and deliverability diagnostics — each one runs in your browser, reads your live DNS, and asks for nothing. No signup, nothing sent, no logging. Start with the one that's bugging you.

/ The toolkit

These free tools check the technical foundations that decide whether your email reaches the inbox: the authentication records (SPF, DKIM, DMARC) that prove your mail is legitimate, the brand and transport layers (BIMI, MTA-STS) that add trust, and the diagnostics (blacklist, reverse DNS, headers) that surface problems after something breaks. Each reads your live configuration and tells you, in plain terms, what's right and what to fix.

They're built to be honest and self-contained. Every check runs as a read-only DNS query from your browser, so nothing is sent to us and your domain is never logged. Where a tool can only tell you so much — a record can be valid while real mail still fails — we say so, and point you to the next step. Fixing the record is the start; operating it over time is what managed infrastructure is for.

/ Compliance

Bulk Sender Compliance Checker

Run your domain through the Gmail, Yahoo, and Microsoft 2026 gates and see the exact one that would bounce you with a 550.

Open tool

/ Security

DKIM Key Generator

Generate an RSA or Ed25519 DKIM key pair in your browser — the private key never leaves the page — with a live sign-verify-tamper demo.

Open tool

/ List hygiene

Email List Hygiene Checker

Paste a list and clean it in your browser: syntax, live MX, disposable, role, duplicates, and typo fixes like gmial.com.

Open tool

/ Security

Lookalike Domain Scanner

Generate the typosquat and Unicode-homograph domains that impersonate your brand, and see live which are registered and mail-armed.

Open tool

/ Brand

SVG to BIMI Converter

Paste a normal SVG logo and convert it to BIMI-compliant SVG Tiny P/S — strips scripts, squares the viewBox, adds the title — with a before-and-after preview.

Open tool

/ Authentication

DMARC Checker

Read your live DMARC record, validate the policy, and flag the gaps that cost you inbox placement.

Open tool

/ Authentication

SPF Checker

Validate your SPF record, count DNS lookups against the 10-lookup limit, and catch a missing -all.

Open tool

/ Authentication

DKIM Checker

Look up a DKIM selector, confirm the public key is published, and check the key length.

Open tool

/ Health

Domain Health Scanner

Check SPF, DKIM, DMARC, BIMI, and MTA-STS in a single pass and get one combined verdict.

Open tool

/ Brand

BIMI Generator & Lookup

Check BIMI readiness and generate the DNS record to display your verified logo in the inbox.

Open tool

/ Transport

MTA-STS Validator

Confirm your MTA-STS policy and TLS-RPT reporting are published and enforced correctly.

Open tool

/ Reputation

Blacklist Lookup

Check whether a sending IP or domain appears on the major email blocklists.

Open tool

/ Diagnostics

Reverse DNS Check

Verify a sending IP has valid PTR records and forward-confirmed reverse DNS.

Open tool

/ Diagnostics

Email Header Analyzer

Paste raw email headers and trace the delivery path, authentication results, and hops.

Open tool

/ Why a checker first

What can a free checker tell you, and what can't it?

A checker reads what you've published and tells you whether it's correct. That's genuinely valuable: most deliverability problems start with a record that's missing, malformed, or stuck in a half-deployed state, and a thirty-second lookup catches those before they cost you a campaign. Since Gmail, Yahoo, and Microsoft turned authentication from best practice into a hard requirement, a clean SPF, DKIM, and DMARC setup is the price of admission to the inbox — and a checker confirms you've paid it.

What a checker can't do is tell you whether every real message passes. A record can be flawless while a forgotten sending source quietly fails authentication, because the gap lives in the mail, not the DNS. That's the boundary between checking and verifying, and it's why these tools each point to the next step: the live message test, the aggregate reports, and ultimately the ongoing operation of keeping every source aligned as you add tools and subdomains. The tools find the problem; keeping it fixed is what we do.

The tools find the gaps. We keep them closed.

Checking your records is the easy part. Getting to enforced DMARC and keeping every sending source aligned as you grow is ongoing work — and it's exactly what we operate. Run a check, then bring us what it found.

Book infrastructure review