Free tool
Can someone send email as you?
Type your domain or your work email address. We read the three public records that decide whether Gmail and Outlook will deliver a message that claims to be from you but isn't, and tell you what to change. It only reads DNS, so nothing touches your website or your inbox.
Why it matters
Fake invoices and changed bank details work because they arrive from an address the customer already trusts. If your domain isn't protected, that address can be yours.
What we read
SPF (who may send for you), DMARC (what to do with mail that fails) and DKIM (the signature your provider adds). They're public records on your domain, the same ones every mailbox reads.
What we found locally
Of eight Grand Strand law firm sites we audited in October 2026, four had no DMARC record and one had it set to monitor only. Not one rejected forged mail.
More on the records themselves: why business email lands in spam, and who can forge it.
Tell us what you're building.
A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.