Domain Security Analyzer

The Domain Security Analyzer is a free tool by Innvikta that inspects public DNS records for SPF, DKIM, and DMARC configurations to check for vulnerabilities that allow email spoofing.

The tool makes live server-side queries to global DNS resolvers to inspect real-time published records (A, AAAA, MX, TXT, SPF, DKIM, and DMARC) for the specified domain.

They are email authentication protocols. SPF lists authorized senders, DKIM cryptographically signs outgoing emails, and DMARC instructs receivers on how to handle emails that fail SPF/DKIM checks.

DKIM records are published under specific "selectors". The tool checks the "default" selector by default. If your organization uses a custom selector (e.g. "google" or "k1"), enter it in the DKIM Selector field.