Free · 30 seconds · No signup · Reads public DNS records only — no passwords, no mailbox access, nothing is ever changed
Tip: enter your domain alone (e.g. acme.co.uk) — your email address isn't needed for this scan.
2,500+ Total Scans 250+ Businesses Secured 500+ Total Domains Monitored
Easy Domain Audit Tool Unsure what to do? Click here to use our simple step-by-step tool instead!Why Your Business Emails Are Landing in Spam
Spam filters block business emails when a domain's SPF, DKIM and DMARC records are missing or broken — invoices, quotes and replies never reach the client. Our free 30-second scan checks all three and shows you exactly what to fix.
The Invisible Problem
Your emails look fine to you — but spam filters check hidden technical settings that prove you are who you say you are. Without these, Gmail, Outlook, and Yahoo treat your messages as suspicious.
The Cost to Your Business
Businesses lose an estimated £1,840/month in pipeline from undelivered emails — an illustrative UK SME estimate based on publicly reported email-delivery loss studies (2025). Actual losses vary by business, sector and email volume. Missed invoices. Lost quotes. Clients who never got your reply and went to a competitor.
What Hackers Exploit
Without proper authentication, criminals can send emails pretending to be your business — fake invoices to your clients, phishing emails to your staff. Your brand reputation on the line.
* Illustrative estimate — not a forecast. Actual losses vary by business size, sector and email volume.
The free scan above shows exactly where the gaps are — and the fix plan shows what to change.
The 3 Security Checks Every Business Email Needs
Our scan tests three hidden settings that prove your emails are legitimate. Think of them as your email's passport, signature, and security policy.
Your Sender Passport (SPF)
Tells the world which servers are allowed to send email from your domain. Like an approved staff list at a bank — if someone isn't on it, they can't access your account.
Your Digital Signature (DKIM)
Adds an invisible digital wax seal to every email you send. When the recipient's email provider sees an unbroken seal, it knows the message is genuine and hasn't been tampered with.
Your Spam Rulebook (DMARC)
Tells Gmail, Outlook, and Yahoo what to do with suspicious emails claiming to be from you — ignore them, quarantine them, or block them entirely. Your email bouncer.
Enter your domain above to see your results for all three checks — free, instant, no sign-up required.
No personal data is kept. Domain lookups are read-only public DNS checks — we never store queries, track your browsing, or share details with third parties. The check list follows NCSC email security guidance.
How the Free Email Security Score Works
Domain Shield scores each domain out of 100. SPF contributes 33 points, DKIM 33, and DMARC 34. A protocol scores full marks when SECURED, 15 points when WARNING, and 0 otherwise. Letter grades follow the score: A+ at 95 or above, A at 85, B at 75, C at 65, D at 50, otherwise F.
| Check | What it verifies | Points | SECURED | WARNING |
|---|---|---|---|---|
| SPF (RFC 7208) | Only approved servers send email from your domain | 33 | 33 | 15 |
| DKIM (RFC 6376) | Every email carries an unbroken cryptographic signature | 33 | 33 | 15 |
| DMARC (RFC 7489) | Suspicious mail is quarantined or rejected, not delivered | 34 | 34 | 15 |
| Total | 100 | 0–100 score · grades A+ to F | ||
The scan also reports BIMI, MTA-STS, TLS-RPT, DNS blocklist listings and WHOIS registration health. Results marked UNKNOWN appear as "Not confirmed" and never count as a pass.
Comparing options? Read Domain Shield vs EasyDMARC, DMARCian & dmarc.report — an honest feature comparison including what Domain Shield does not do.