One opinionated loop: scan, diagnose, fix, verify, watch. Everything below feeds the same stream of findings — one mental model, wherever you look at it from.
Every domain you add is scanned end to end — 41 checks per pass — then re-scanned on a schedule set by your plan. Change detection runs against the previous scan, so a record that silently changes at 3 a.m. becomes a finding, not a mystery.
SPF parsed to its real lookup count, DKIM resolved on every selector we can find, DMARC read for what its policy actually enforces, plus MTA-STS, TLS-RPT and BIMI. Each failure arrives with the exact record to paste and instructions for your DNS host.
34 DNSBLs watched across your domain and every sending IP we resolve from your MX and SPF records. The moment a list flips, the finding arrives with that list's delisting playbook attached — the same one documented in the wiki.
Aggregate reports ingested at a per-domain address and translated into a source table: who is sending as you, how much, and whether they pass. Unknown sources are highlighted, because that is what spoofing looks like before anyone complains.
Real seed sends to a peer mailbox network across 3 providers. Not a prediction — a verdict per provider: inbox, promotions or spam, tracked over time so a slide shows up as a trend rather than a surprise.
Score a message before you send it: spam-trigger rules, structural problems, and the parts of your copy most likely to cost you placement — with rewrite suggestions rather than a number and a shrug.
Every finding arrives already diagnosed: what broke, why it matters for your inbox rate, exactly what to do, and how the next scan will verify it. Every claim cites the evidence and its timestamp — and it advises, it never touches your DNS.
Severity-routed, so a critical listing emails you immediately and an informational change waits for the weekly report. Every alert leads to the finding, and the finding leads to the fix.
Free scan, no signup. One domain monitored free, forever.