Email that passes the checks Gmail and Microsoft now enforce.
Invoices in spam and replies bouncing with "550 5.7.26" usually come down to a few DNS records written slightly wrong. We fix SPF, DKIM, DMARC, reverse DNS and TLS for your domain, hand you the exact records and a plain-English report, and prove the result with a real test message.
Gmail and Yahoo now reject or junk mail that is not properly authenticated, and Microsoft has followed for large senders. Most of the fixes are small: an SPF record over its ten-lookup limit, a DKIM key that was never published, a DMARC policy nobody reads the reports for. We find them with the same audit tool behind our free email check, fix them with you, verify with a real message, and check again a week later.
- ✓SPF that fits the ten-lookup limit, which silently breaks many records
- ✓DKIM keys published and signing turned on for each service that sends as you
- ✓DMARC started at monitoring so nothing legitimate breaks, then tightened with you
- ✓Reverse DNS and STARTTLS encryption for self-hosted mail servers
- ✓MTA-STS and TLS reporting, so mail sent to you cannot be quietly downgraded
- ✓Bounces such as 550 5.7.26 and 550 5.7.515 traced to the record behind them
Small businesses, practices and nonprofits whose invoices, quotes or newsletters land in spam or bounce, whether they use Google Workspace, Microsoft 365, a newsletter service or their own mail server.
The full report and the exact records to publish, for one domain.
Delivered in 2 days.
Records live for one domain and up to two sending services, DMARC monitoring set up, verified with a test message, and a re-check after 7 days.
Delivered in 4 days.
For self-hosted Postfix, Exim, cPanel or mailcow servers: reverse DNS, TLS, DKIM signing and MTA-STS, plus everything in Fix.
Delivered in 5 days.
A monthly re-check of SPF, DKIM, DMARC, MX and certificates, an alert when something breaks (a newly added newsletter service is the usual culprit), and up to an hour of fixes a month included.
Billed monthly, per domain.
You stay in control: you add the records yourself, or invite us through your DNS provider's own team or delegate feature. We never need your email password.
Not included: bulk or cold-email setups, purchased lists, "warming", domain rotation, or any promise of inbox placement.
No one honestly can. We fix authentication and configuration, which is what the big providers require; content and list quality also matter.
No. You add the records yourself, or invite us through your DNS provider's own access feature.
We start you on monitoring (p=none) so nothing legitimate breaks, then show you how to tighten it once the reports show your own mail passing.
The free email check reads your domain's public records in a few seconds and explains what it finds. Nothing is stored.
Run the free email checkFixed scope, fixed price, agreed in writing — see how we work.