Free DNS Health Scan

Check your domain's SPF, DKIM, DMARC, MX, DNSSEC and more in seconds. Get a grade, find what's broken, and fix it before spammers exploit it.

🔍 Scan Any Domain — Free

9 Critical DNS Checks

Every scan runs a battery of tests mail providers and Google use to decide if your emails land in inbox or spam.

📍

A Record

Does your domain resolve to a live server?

🌐

NS Records

Are your nameservers properly configured?

📬

MX Records

Mail servers correctly routed, no bypass risks.

🛡️

SPF

Only authorised senders can send as you. Catches +all, lookup-limit, missing ~all.

🔐

DMARC

Policy enforcement against spoofing. Checks for p=none, missing rua.

🔑

DKIM

Cryptographic email signing. We try 13 common selectors.

🔒

MTA-STS

Force TLS on inbound mail. Stops downgrade attacks.

📊

TLS-RPT

TLS failure reporting so you see delivery issues.

✅

DNSSEC

Cryptographic DNS signing to stop cache-poisoning.

Fix It — Pick Your Plan

From one-off Quick Fix to fully managed Agency — get it done by DNS experts, not guesswork.

Quick Fix

£49/one-off
  • 1 specific DNS issue fixed
  • SPF, DKIM, or DMARC
  • Pre & post-fix scan
  • 24-hour turnaround
  • Email support

Full Audit

£99/one-off
  • All 9 checks fixed
  • Detailed written report
  • Before/after scan grades
  • 2 weeks follow-up support
  • 48-hour turnaround

Monitored

£19/month
  • Daily DNS health scan
  • Email alerts on changes
  • Monthly health report
  • Drift detection
  • Cancel anytime

Managed Pro

£49/month
  • Daily monitoring + alerts
  • Unlimited fixes included
  • DMARC report analysis
  • Quarterly review call
  • Priority support

Agency

£199/month
  • Up to 25 domains
  • White-label reports
  • API access
  • Dedicated account manager
  • Volume discounts available

Frequently Asked Questions

The questions we get asked most about DNS, SPF, DKIM and DMARC.

What happens if I don't have SPF and DMARC?
Spammers can easily impersonate your domain (spoofing). Gmail, Outlook and Yahoo will increasingly mark your legitimate emails as spam, and from 2024 Google/Yahoo require DMARC for bulk senders. Missing these records means lost deliverability, lost customer trust and potential fraud losses.
Will fixing DNS break my existing email?
Not if done correctly. Our Full Audit starts with a recovery plan and staged rollout (e.g. DMARC pct=20 → 50 → 100) so you catch any false positives before enforcement. Every change is reversible within DNS TTL.
How fast does a fix take effect?
We set low TTLs (typically 65–300 seconds) on all managed zones, so DNS changes propagate in under 5 minutes. Most ISPs honour TTLs within an hour at most.
Do you need access to my DNS?
For the Quick Fix and Full Audit, yes — we need either registrar login, DNS provider API access, or we can give you the exact records to paste. Managed plans require ongoing delegated access for automation.
What is DMARC and do I really need it?
DMARC tells receiving mail servers what to do with emails that fail SPF/DKIM. Without it, spoofed email might still be delivered. Google and Yahoo now REQUIRE DMARC for senders of 5000+ messages/day. Even for small senders it's the single biggest deliverability upgrade you can make.
Can you fix issues on Cloudflare / Route 53 / GoDaddy?
Yes. We work with all major providers including Cloudflare, AWS Route 53, GoDaddy, Namecheap, Google Domains, 123-Reg, IONOS, Gandi, and most registrars. For Managed plans we have direct API integration with Cloudflare and Route 53.

Book a Plan

We'll reply within 2 business hours with a Stripe payment link. No auto-charge.