Features Pricing
Learn
What is DMARC? What is SPF? What is DKIM? What is BIMI?
Free Tools
DMARC Checker SPF Checker DKIM Checker BIMI Checker MTA-STS Checker Blacklist Checker Header Analyzer Domain Scanner Phishing URL Checker Email Verification BIMI Logo Converter Academy Blog Docs MSP Program About Contact
Sign in Start →
40+ security tools in one platform

Every tool you need to protect your email.

From DMARC enforcement to AI-powered threat detection, hosted DNS delegation to managed DKIM — SpoofWard gives you enterprise email security wrapped in an interface anyone can use.

40+
Security Tools
11
Free Public Tools
5
DNS Providers
9
Integrations
<2 min
Setup Time

DMARC, SPF, DKIM — fully automated.

Ingest DMARC reports automatically, validate every authentication record, and progress from monitoring to full enforcement with guided wizards.

DMARC Monitoring
Automatic RUA report ingestion, XML parsing, source IP enrichment with rDNS and ASN lookups, and pass/fail/quarantine breakdown by sender.
SPF Validator
Detect missing records, lookup overflows (10-lookup limit), syntax errors, and dangerous +all softfails before they break deliverability.
DKIM Discovery
Auto-discover DKIM selectors across Google, Microsoft, Mailchimp, SendGrid, and more. Verify each public key in real time.
Managed DKIM Keys
Generate, rotate, publish, verify, and retire DKIM keys from one dashboard. Full key lifecycle management with DNS auto-publishing.
Pro
Enforcement Wizard
Step-by-step guided progression from p=none to p=quarantine to p=reject. Know exactly when you're ready to enforce.
Pro
SPF Optimizer
Flatten nested includes, reduce DNS lookups below the 10-lookup limit, and auto-generate optimized SPF records.
Pro
Forensic Reports (RUF)
Ingest and parse DMARC forensic reports for granular, per-message failure analysis. See exactly which messages failed and why.
Pro
TLS-RPT Monitoring
Ingest TLS-RPT (RFC 8460) reports to monitor encrypted email delivery failures and ensure TLS connections are working.

One score. Total DNS clarity.

A single 0–10 health score that distills SPF, DKIM, DMARC, MX, BIMI, MTA-STS, and TLS-RPT into one number leadership can understand. Monitored 24/7.

DNS Health Score
Benchmark every DNS record against best practices. Score history, trend graphs, prioritized recommendations with copy-paste fixes.
24/7 Monitoring
DNS records are checked every 15 minutes around the clock. If something changes, you'll know before your customers do.
DNS Change History
Full timeline of every DNS record change. See what changed, when, and compare snapshots side by side to troubleshoot issues fast.
DNS Alerts
Get notified the moment something breaks: SPF expands, DKIM keys rotate, DMARC policy changes, or MX records disappear.
Hosted DNS Delegation
Delegate DMARC, SPF, MTA-STS, and TLS-RPT records to SpoofWard-hosted zones. We manage your DNS records via Cloudflare.
Pro
Subdomain Discovery
Enumerate subdomains to find shadow IT, forgotten services, and potential DNS takeover vulnerabilities across your domain.
Pro
MTA-STS & DANE
Validate MTA-STS policies and DANE TLSA records to ensure encrypted email transport. Built-in generator for easy setup.
DNS Takeover Scanner
Scan for dangling CNAME records and misconfigured delegations that attackers could hijack to impersonate your domain.

See threats before they reach your inbox.

Spot impersonation attempts, detect data breaches, scan for lookalike domains, and verify phishing URLs — all from one threat dashboard.

Threat Dashboard
Centralized threat overview with IP reputation scoring, suspicious sender identification, and shadow IT detection across all your domains.
Brand Protection
Scan for lookalike domains that could be used for phishing attacks against your brand. Detect typosquatting, homoglyph, and bitsquat variants.
Business
Breach Monitor
Search for compromised credentials using Have I Been Pwned integration. Scan your domain or individual email addresses for breaches.
Pro
Phishing URL Checker
Submit suspicious URLs for multi-engine analysis. Check reputation, SSL certificates, redirect chains, and known phishing indicators.
Inbound Auth Check
Verify that emails arriving at your domain pass SPF, DKIM, and DMARC. Detect forged messages before they reach employees.
Business
Threat Alert Rules
Create custom alert rules based on IP reputation, sending volume thresholds, geo anomalies, and authentication failure patterns.
Pro
Threat Reports
Generate comprehensive PDF threat reports for stakeholders, board presentations, and compliance audits. One-click download.
Business
IP Reputation Lookup
Deep-dive into any IP address: geolocation, ASN, rDNS, blacklist status, abuse contacts, and historical sending behavior.

AI that works while you sleep.

Machine learning classifies senders, detects anomalies, generates weekly insights, and explains alerts in plain English — so you act on what matters.

AI Sender Classification
Machine learning automatically classifies every sending source as legitimate, suspicious, or unknown. Continuously learns from your data.
Anomaly Detection
Detect unusual sending patterns: volume spikes, new source IPs, geographic shifts, and sudden authentication failures. Acknowledge or resolve alerts.
AI Weekly Insights
GPT-powered weekly summaries that analyze your DMARC data and generate actionable recommendations in plain English.
Alert Explainer
Don't understand a DMARC alert? Click "Explain" and get a plain-English breakdown of what happened, why it matters, and what to do next.
Sender & Vendor Discovery
Automatically discover every service sending email on your behalf. Identify shadow IT, marketing tools, and unauthorized senders.
Smart Alerts
Real-time alerts via email, Slack, Teams, or webhook. Configurable per domain with suppression rules and severity thresholds.
Automated Weekly Reports
Beautifully formatted HTML email reports delivered every Monday. Executive PDF reports with one-click download for stakeholders.
Geo Intelligence
Map-based DMARC analysis showing sending sources by country, timeline views, and geographic anomaly detection with CSV export.

Reach the inbox, not the spam folder.

Monitor your sending reputation, test email deliverability, validate addresses, and track BIMI brand indicators to maximize inbox placement.

Deliverability Score
Composite score that tracks your email deliverability over time. Historical trends show the impact of DNS changes on inbox placement.
Email Spam Tester
Send a real test email and get a deliverability verdict. Checks SPF, DKIM, DMARC alignment, content analysis, and spam score.
Pro
Email Verification
Verify email addresses are real, active, and deliverable. Single check free for everyone, bulk verification for authenticated users.
Blacklist Monitoring
Check your domain and IP addresses against 50+ real-time blacklists (RBLs). Instant alerts if you get listed.
BIMI Checker & Tracker
Validate BIMI records, convert logos between SVG and PNG, and monitor VMC certificate status. Full BIMI setup wizard included.
Pro
Reputation Monitoring
Continuous monitoring of your sending reputation across major ISPs. Auto-discover blacklists, track trends, and get alerts on changes.
Pro
Email Header Analyzer
Paste raw email headers and get a parsed breakdown of authentication results, routing hops, delays, and security checks.
Domain Comparison
Compare DNS health, authentication status, and security posture across multiple domains side by side. Perfect for audits.
Business

From XML noise
to clear answers.

DMARC reports were never meant for humans. We ingest them all, parse the XML, deduplicate sources, and turn them into dashboards you can actually act on — without ever opening a text editor.

  • Automatic RUA report ingestion via dedicated mailbox
  • Source IP enrichment with rDNS and ASN lookups
  • Pass / fail / quarantine breakdown by sender
  • Policy progression: none → quarantine → reject
  • Compliance timeline with readiness scoring
DMARC Authentication
Last 7 days
Pass
94.8%
Quarantine
3.7%
Reject
1.5%
TOP SENDERS
Google Workspace
SendGrid
Mailchimp
Unknown IP

Connects to everything you already use.

Five DNS providers, two SIEM platforms, Slack, Teams, webhooks, and a full REST API. SpoofWard fits into your stack, not the other way around.

CF
Cloudflare
DNS Provider
R53
AWS Route 53
DNS Provider
Az
Azure DNS
DNS Provider
GC
Google Cloud DNS
DNS Provider
GD
GoDaddy
DNS Provider
Slack
Alerts & Chat
Microsoft Teams
Alerts & Chat
Azure Sentinel
SIEM
SP
Splunk
SIEM
Webhooks
Custom HTTPS
REST API & Agent Tokens
Full API access for domains, DMARC data, DNS health, and alerts. Build your own integrations.

11 free tools. No signup required.

Scan any domain instantly with our public security tools. No account needed, no rate limits on basic checks, no strings attached.

One number,
total clarity.

We benchmark every DNS record against industry best practices and combine the results into a single 0–10 health score. It updates in real time, tracks trends, and tells you exactly which records need attention.

  • Continuous monitoring across SPF, DKIM, DMARC, MX, BIMI, TLS-RPT
  • Score history graph to track improvements over time
  • Prioritized recommendations with copy-paste DNS fixes
  • Per-record severity ratings (critical, warning, info)
  • Compliance snapshots for audit trails
8.7
/10
Healthy domain
↑ +1.3 this week
↑ 12 issues fixed
SPF Record
DKIM (google)
DMARC Policy
BIMI
MTA-STS
TLS-RPT

Built for MSPs.
Loved by enterprises.

Manage hundreds of client domains from one dashboard. White-label the platform with your brand. Give each client their own portal. Track trials, billing, and onboarding.

  • Multi-tenant architecture with role-based access
  • White-label branding (logo, colors, custom domain)
  • Client portal with self-service login
  • MSP-specific plans and pricing controls
  • Bulk domain operations (scan, export, delete)
  • Custom dashboard widgets per workspace
  • Audit logging with CSV/PDF export
  • SSO via Google & Microsoft Azure AD
  • Two-factor authentication (TOTP)
  • GDPR data export & account deletion
Learn about MSP program Apply as Partner →
What MSPs get
1
Dedicated Reseller Portal
Your own branded login page at your custom domain
2
Client Management
Add, onboard, and manage client domains from one place
3
Automated Reporting
White-labeled weekly reports delivered to your clients
4
API & Agent Tokens
Programmatic access for automation and custom workflows
5
Trial Management
Auto-provisioning with configurable trial periods
6
Revenue Dashboard
Track client MRR, churn, and growth metrics
Sample Course
Understanding DMARC
4 lessons
SPF Best Practices
3 lessons
60%
DKIM Key Management
5 lessons
25%
Email Deliverability 101
4 lessons
Threat Response Playbook
3 lessons

Learn email security,
earn certificates.

Self-paced courses covering DMARC, SPF, DKIM, deliverability, and threat response. Complete lessons, pass quizzes, and download certificates to prove your expertise.

  • Self-paced courses with lesson tracking
  • Quizzes with instant scoring
  • Downloadable PDF certificates
  • Progress dashboard across all courses
  • SEO knowledge base (What is DMARC/SPF/DKIM/BIMI)
Browse courses →

How we compare.

Built specifically for teams who want enterprise-grade protection without enterprise-grade complexity.

Capability SpoofWard DIY Tools Legacy SaaS
Automated DMARC ingestion (RUA + RUF)
Single DNS health score (0-10)
AI-powered sender classification
Anomaly detection & alerting
Managed DKIM key lifecycle
Hosted DNS delegation (DMARC/SPF/MTA-STS)
5 DNS provider integrations
SIEM integrations (Sentinel + Splunk)
Brand protection (lookalike scanner)
Breach monitoring (HIBP)
11 free public tools (no signup)
Security Academy with certificates
MSP / white-label reseller portal
Geo intelligence & mapping
REST API & agent tokens
Setup in under 2 minutes
Free forever plan

Ready to secure your email?

Join thousands of domains protected by SpoofWard. Start free — no credit card required.