What does the Email Authentication scan check?

5 checks: MX records present; SPF: one record, ~all or -all, 10 lookups or fewer; DKIM found on a common selector; DMARC at quarantine or reject with rua; and more. Each returns Pass, Warn or Fail.

Does it need account access?

No. It runs on your public footprint from the domain alone.

Which audit fixes these findings?

The Growth Audit ($3,500, 2 weeks).

Email Authentication scan

Measurement / Level 0 / live

SPF, DKIM, DMARC and BIMI records for your sending domain, plus MX health. Cheap to run and the single most shared result.

The 5 checks

01MX records presentpasswarnfail
02SPF: one record, ~all or -all, 10 lookups or fewerpasswarnfail
03DKIM found on a common selectorpasswarnfail
04DMARC at quarantine or reject with ruapasswarnfail
05BIMI (info)passwarnfail

What this scan checks

SPF, DKIM, DMARC and BIMI records for your sending domain, plus MX health. Cheap to run and the single most shared result.

Status

This module is in build and will appear in scan results soon. The checks listed above are the ones it will run. Each returns a finding with evidence, a recommendation and an effort estimate.

Which audit fixes it

Findings from this scan map to the growth audit audit.

Questions

What does the Email Authentication scan check?: 5 checks: MX records present; SPF: one record, ~all or -all, 10 lookups or fewer; DKIM found on a common selector; DMARC at quarantine or reject with rua; and more. Each returns Pass, Warn or Fail.
Does it need account access?: No. It runs on your public footprint from the domain alone.
Which audit fixes these findings?: The Growth Audit ($3,500, 2 weeks).