EmailHealth checks SPF, DKIM, DMARC and blocklists on every domain you send from, every day, and sends you the exact fix the moment one breaks.
Free check, no sign-up. Monitoring is free too, with no card.
Paste your domain list once. Every morning each domain gets the full check and is compared with yesterday. Only a domain that got worse sends an alert.
Acme outbound · checked 06:00
| Domain | SPF | DKIM | DMARC | Blocklists | Renews |
|---|---|---|---|---|---|
| getacme.ioGoogle Workspace | -all | reject | Clean | 214 days | |
| tryacme.coGoogle Workspace | -all | p=none | Clean | 301 days | |
| acme-outreach.comMicrosoft 365 | -all | selector1 | quarantine | Clean | 88 days |
| acmehq.netGoogle Workspace | ~all | No key at s1 | quarantine | Clean | 162 days |
| useacme.ioZoho Mail | -all | zmail | reject | Clean | 19 days |
| acmemail.netMicrosoft 365 | -all | selector1 | reject | Clean | 240 days |
Sample board with fictional domains. Fleet monitoring is free during early access.
Four tools that keep working after the first report, so you do not have to remember to look.
Email tests and seed address
Send one email to a test address, or add your seed address to every campaign list. We read each copy the way a receiving server does.
DMARC reports
Receivers report each message that uses your domain. We name the service behind each source, show which pass, and tell you how to fix the ones that do not.
Blocklists and domain watch
Every day we check the domain and the servers that send for it, and the things around the mail that break quietly.
Fix guides
We see where your DNS is hosted and write each fix for it: the right field names, the name in the format your host wants, and a link to the page.
Pictures show fictional domains.
No score to decode. Each alert names the domain, the check that failed, and the exact record to publish.
acmehq.net failed DKIM. No key answers at selector s1.
Sample alerts for fictional domains.
One message when a domain gets worse, one when it is fixed. Nothing on the days your domains stay healthy.
Email · Tue 06:02
From EmailHealth alerts
acmehq.net failed DKIM
Yesterday acmehq.net passed every check. This morning no DKIM key answers at selector s1, so receivers cannot verify its mail.
Publish this TXT record
s1._domainkey.acmehq.net
"v=DKIM1; k=rsa; p=<public key from your sending tool>"
Every other domain in Acme outbound is healthy.
# outbound-ops
Slack
EmailHealth Tue 06:02
acmehq.net failed DKIM
No key at s1._domainkey. Fix record in the email alert.
EmailHealth Wed 06:01
acmehq.net fixed
DKIM passes again. All 6 domains healthy.
This week · 2 messages
Sample alerts for a fictional fleet. Email and Slack alerts are live today.
The same checks run on the free report and on every domain in a fleet. Each has a free tool of its own.
There is no billing yet. The free plan watches one domain with every check and alert. Early access watches up to 10 domains, also at no cost: answer two questions to join. If paid plans come later, you will hear from us before anything changes.
Live today
Coming next
No card. Sign in with Google or an email link.
The most common causes are missing or broken authentication (SPF, DKIM or DMARC), a sending server or domain on a blocklist, and content that looks like bulk mail, such as unfilled merge tags or URL shorteners. The free domain check finds the first two in a few seconds; the email test also scores the content of a real message.
SPF lists the servers allowed to send for your domain. DKIM adds a signature that proves the message was not changed and came from you. DMARC tells receivers what to do when both fail for your domain (nothing, junk it, or reject it) and sends you reports. Gmail and Yahoo require all three from bulk senders.
p=none only collects reports: receivers deliver spoofed mail as usual. Move to p=quarantine when 98% or more of your real mail passes DMARC for about two weeks, then to p=reject. The DMARC reports page shows that number and tells you when it is safe.
The domain check reads your DNS records. The email test reads a real message you send to a test address: what the receiving server decided for SPF, DKIM and DMARC, which server sent it and whether it is listed, the Gmail and Yahoo header rules, and the content.
A permanent address in your account that you add to each campaign list, like one more contact. We score every copy that arrives and alert you when a campaign is worse than the last one from the same sender.
Yes. Every tool is free and needs no sign-up. Monitoring is free during early access: the free plan watches one domain with every check and alert, and early access watches up to 10 domains. No card is needed. If paid plans come later, you will hear from us before anything changes.
We do not keep the body of the emails you send to a test or seed address. We save the result: the score, the checks, and the short text each finding quotes. Pasted text in the spam checker is checked in memory and not stored.
All of them, because the checks use public DNS and real email. We also name about 50 services by sight, including Google Workspace, Microsoft 365, Zoho, SendGrid, Mailchimp, Amazon SES, Mailgun, Postmark, HubSpot and Salesforce, and write fix guides for about 20 DNS hosts.
It takes about three seconds.
Free. No card. Every tool works without sign-up.