All tools/Email Security/03

Email Security Grader

Spoofable or not — one scan tells you where your domain actually stands.

SPF · DKIM · DMARC · BIMI · MTA-STS — instant A–F grade for any domain

Demo — no DNS lookups are performed; a previously captured result is shown

Sample result. These findings are real output from scanning example.com on 2026-09-13. Your own input was not scanned, and nothing you enter here leaves your browser.

Live access is by invitation. Verify an approved email to run this page against your own target, or ask for access.

What gets checked

25pts

SPF

Which servers can send email as your domain

20pts

DKIM

Cryptographic signature on outgoing messages

30pts

DMARC

Policy for SPF/DKIM failures + reporting

5pts

BIMI

Brand logo in Gmail/Apple Mail/Yahoo inboxes

5pts

MTA-STS

Force TLS on incoming SMTP connections

5pts

TLS-RPT

Reports when TLS fails on SMTP connections

hodan.ai — Security tooling