Authorized senders
See whether a public SPF record identifies the mail services allowed to send for your domain.
Check your SPF, DKIM, and DMARC posture in seconds. Then turn on recurring, supported checks for your verified business domain.
Enter the domain you use for Google Workspace, Microsoft 365, or another business email provider.
No mailbox access needed. This checks public DNS records only.
Website & Domain Watch uses GuardHound’s existing domain monitoring to keep checking your domain after you verify ownership. When a supported check finds an actionable email-authentication configuration gap, your alert route gives you a clear next step.
See whether a public SPF record identifies the mail services allowed to send for your domain.
Check common selectors for a published DKIM record so recipients can verify signed mail.
Check whether a public DMARC policy tells recipients how to handle unauthenticated mail.
It checks public DNS and supports recurring monitored checks after ownership verification. It does not protect mailboxes or endpoints, receive or parse DMARC aggregate reports, change your DNS records, or replace Google Workspace, Microsoft 365, or another email provider.
Use these plain-language guides before changing a record. Start DMARC in monitoring mode and confirm your legitimate senders before moving to an enforcing policy.