Free email security check
Can someone send email as your business?
84% of the Colorado Springs business email domains we checked can be impersonated. Enter your domain and we will email you a plain-English report: what is protected, what is not, and exactly what to fix. It takes about half a minute and costs nothing.
Run the check
The report goes only to an email address at the domain you check, so it reaches the business that owns it and nobody else.
What we check
Everything a mail server, a browser or a scammer can see from the outside
Only public records. Nothing is installed and nobody signs in to anything.
DMARC
Whether you tell Gmail, Outlook and everyone else to reject mail forged in your name, or only to watch.
SPF
Whether you list the servers allowed to send your mail, and whether the list actually blocks anyone.
DKIM
Whether your outgoing mail carries the signature that proves it really came from you.
Blocklists
Whether your mail servers appear on the public spam blocklists that make your messages vanish.
Website certificate
Whether your site’s security certificate is valid, and how long until it expires.
Domain renewal
When your domain registration expires. A lapsed domain takes your email and website down with it.
If it finds problems: fixed in a week, for $495
- One fixed price, $495 per domain, whatever the report found
- SPF, DKIM and DMARC set up correctly for Microsoft 365, Google Workspace or your provider
- DMARC moved to enforcement step by step, so real mail keeps arriving while forgeries are rejected
- Done within a week of your go-ahead, remotely, with a before-and-after report
The “Book the fix” link is in your report. Prefer to talk first? Call 719-451-1218.
Questions
Why only to an address at my domain?
The report shows exactly how a domain could be impersonated. Sending it only to that domain’s own mailboxes keeps it with the business that owns it.
Will this change anything on my domain?
No. The check only reads public records, the same ones every mail server in the world reads. Nothing changes until you ask us to fix something.
We use Microsoft 365. Aren’t we protected already?
Not by default. Microsoft 365 and Google Workspace both make DKIM and DMARC available, but most businesses never turn them on. In our local research, only 2% of Microsoft 365 domains were fully protected.
Want this watched for you?
Our Secure Office plan keeps your email records, website certificate and domain checked every day, with a monthly report card.