Free tool · 2026
Email Deliverability Checker
Check your domain's email infrastructure in real-time. SPF, DKIM, DMARC, MX, MTA-STS, BIMI — validated against the live DNS, no signup, no email needed. Get an honest score and a copyable report. Powered by Cloudflare DNS-over-HTTPS.
Switch language without reloading.
Tip: common DKIM selectors are default, google, k1, selector1, mail. Leave blank to skip DKIM check.
Want this report as PDF?
We'll email you a formatted report with prioritised remediation steps. Optional, no follow-up sales pitch unless you ask.
How to read your results
A passing score on every check does not guarantee inbox placement, but a failing score on any of them practically guarantees deliverability problems. The checker tells you whether the foundation is sound; placement still depends on engagement, list quality, content, and sending pattern — none of which DNS can measure.
SPF proves which servers are authorised to send for your domain. Missing or broken SPF is the most common single cause of placement issues. DKIM cryptographically signs your mail and is required for DMARC alignment. The selector matters — your ESP or MTA chose one; you need to know which. DMARC ties SPF and DKIM together and tells receivers what to do with mail that fails. Without DMARC at policy p=quarantine or stricter, the Gmail/Yahoo/Microsoft 2024-2025 enforcement era treats your domain as untrusted by default.
MTA-STS enforces TLS on inbound mail to your domain — important for receiving, not sending, but a healthy email setup has it. BIMI displays your logo in the inbox at participating receivers (Gmail, Yahoo, Apple Mail) — visual trust signal that boosts open rates 2-10% in our measurement. MX records route mail; broken MX means you cannot receive replies, which is a deliverability problem in disguise.
What this tool does not check
Real inbox placement testing — that requires sending actual mail to seed accounts across Gmail, Outlook, Yahoo, iCloud, and measuring which folder it lands in. Tools like GlockApps and MailReach do this; we do this as part of our paid deliverability audit service.
IP reputation scoring against blacklists like Spamhaus, Barracuda, UCEPROTECT — those require server-side queries (RBL checks use DNS but with reverse-IP lookups that browser CORS does not allow cleanly). Our audit covers 60+ RBLs.
PTR/rDNS verification — requires reverse DNS resolution from your sending IP, which is a server check, not a client check. This is one of the standard items in our audit.
Content filtering analysis — SpamAssassin, Barracuda, Proofpoint scoring requires actually running the content through those engines. The audit handles this with sample emails you provide.
If your check shows problems
Three paths depending on severity:
Single fix needed (e.g. missing DMARC record): you can probably do this yourself. The diagnostic message above each result tells you what is missing and what to add. Add the record at your DNS provider, wait for propagation, re-run the check.
Multiple issues, you have time to fix: book a paid audit (€299-€899). You get a full written report with priorities, the exact records to add, and a 30-60 minute call walking through remediation. Your team executes the fixes.
Multiple issues, your domain reputation is already damaged: book a recovery engagement (€1,500-€3,500). We do the fixes ourselves, run the warm-up, rebuild reputation hands-on. This is the right answer when the symptoms are not just configuration but actual reputation collapse.