Validate SPF, DKIM, and DMARC policies to protect your domain from impersonation, phishing, and email spoofing.
Checks SPF record syntax and lookup limits (<10), DKIM key length, and DMARC enforcement (p=reject vs p=none) with reporting mailboxes.
Canonical test payload dispatched during security surface audits.
v=DMARC1; p=none; (No spoofing enforcement)Watch the probe engine test this signature in an isolated sandbox.
DMARC Reject Policy
v=DMARC1; p=none; sp=none;
v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc-reports@example.com; pct=100;
Upgrade DMARC policy from p=none to p=reject to command receiving mail servers to drop fraudulent spoofed emails.
Copy and paste into your editor to refactor this issue automatically.
Test your public domain specifically for DNS Anti-Spoofing & Email Security Scanner.
Checks commonly evaluated alongside DNS Anti-Spoofing & Email Security Scanner during surface discovery.
Find XSS vulnerabilities that could let attackers inject malicious scripts and steal customer sessions.
Detect dangerous CORS policies that allow unauthorized third-party origins to invoke authenticated APIs.
Inspect parameter tampering and insecure direct object references across user-scoped data endpoints.
Audit your site across all 41 vectors automatically on every deploy.