Free public tools
Email authentication tools you can run without signing up
Same passive scanner Client Posture uses for MSP reports. Results are free. A fail is only shown when we verified it in public DNS. When you want the white-label version, see MSP pricing or the First 90 Days playbook.
Free DMARC checker
DMARC checker: is this domain actually enforcing?
See whether a domain’s DMARC record is monitor-only or enforcing. We parse p=, t=, and rua (pct is historic), then give the next DNS record and the none → quarantine → reject path.
Free SPF checker
SPF checker: lookup count, include tree, and flatten advice
Count every DNS lookup toward the RFC 7208 limit of 10, name the services in the include chain, and get a flatten or cleanup suggestion when the record would void.
Free DKIM checker
DKIM checker: common selectors, key length, and what we cannot see
Probe common DKIM selectors plus one you type. A miss is Unknown, not a fail. We report RSA key length and which provider each selector belongs to.
Email security grade
Email security grade: SPF, DKIM, DMARC, and MX in one score
One transparent grade from verified SPF, DKIM, DMARC, and MX. See points per check, the three fixes to do first, and a shareable result with an OG image.
Cyber insurance email controls
Which email questions can this domain answer Yes on a cyber application?
Map public DNS to the email questions carriers actually ask. Every answer is Verified, Unknown, or Not tested, with a paste-ready evidence line. Not insurance advice.
Fix this for your clients, white-labeled
Client Posture runs the same checks under your logo, with a branded PDF and a quote attached. MSPs use it to walk into the next meeting with evidence instead of a generic screenshot.