Email Security Audit

Email Security Audit Online

The Email Security tool on 101IP performs a full audit of a domain's email security: checks SPF, DKIM, DMARC and BIMI, analyses the configuration and assigns a grade from A+ to F.

What the tool checks

• SPF — authorised sending servers and policy strictness (-all / ~all / +all);
• DKIM — presence of public keys for email signing (17 selectors checked);
• DMARC — policy for emails that fail SPF/DKIM (none / quarantine / reject);
• BIMI — brand logo in email clients (bonus point).

Grading system

• A+ — SPF with -all, DMARC p=reject, DKIM configured, BIMI present;
• A / B — all key settings present, but policies are not at maximum strictness;
• C / D — some settings are missing or misconfigured;
• F — critical standards (SPF, DMARC) are not configured.

Frequently Asked Questions

• What does an F grade mean in an email security check?

  An F grade means that one or more critical records — SPF, DKIM, or DMARC — are missing or contain a fatal error. Most often the DMARC record is absent or has an invalid syntax. Use the tool to get an exact description of the problem and a step-by-step fix.

• Does a small business need to set up BIMI?

  BIMI is optional, but it increases brand recognition and recipient trust. It only works when SPF, DKIM and DMARC are correctly configured with a quarantine or reject policy. Without a paid VMC certificate the logo is visible only in some email clients, but it is still a worthwhile improvement.

• How often should I run an email security audit?

  Run the audit whenever you change your mail infrastructure — switching provider or adding a new sending service — and at least once a quarter. Attackers constantly probe for weaknesses, and a stale include record in your SPF can compromise your domain without any obvious sign.