Question 1

Is the domain scanner free?

Accepted Answer

Yes. Scanning a domain's DMARC, SPF and transport security setup is free and doesn't require an account or email address.

Question 2

What does the domain scanner check?

Accepted Answer

It runs two independent checks: sender authentication (whether the domain can be spoofed, based on its DMARC policy and SPF alignment) and transport security (whether mail to or from the domain can be intercepted or downgraded in transit, based on MTA-STS).

Question 3

Does scanning a domain change anything in its DNS?

Accepted Answer

No. The scanner only reads existing public DNS records — it never writes or modifies anything, and works on any domain, not just ones you own.