See where you stand.
Check your public DNS records and website certificate. Get a readable breakdown of what’s present, missing or worth reviewing.
BY LABCMD / EMAIL AUTHENTICATION
Your domain.
Your reputation.
Keep watch over both.
Find the gaps in your email authentication. Understand what to fix. Keep an eye on the records your business depends on.
Free check · No account or card required
Explore the dashboardYOUR NEXT STEP
Make your policy count.
example.com Illustrative data
SPF record publishedReview every service that sends for you.
DKIM keys foundConfirm signing with a real message.
DMARC in monitoring modeReview reports before enforcement.
A CONSIDERED CHANGE
See the record. Review its purpose.
Publish when you’re ready.
v=DMARC1; p=none; rua=mailto:…
Daily DNS checks on Pro & Agency
ONE VIEW OF YOUR DOMAINSPFDKIMDMARCHTTPSDNSSECMTA-STS marker
FROM A QUESTION TO A PLAN
Less DNS guesswork.
More clarity.
An email authentication check should leave you knowing what to do next.
Make changes deliberately.
Follow the setup checklist. On paid plans, connect Cloudflare and preview a new DMARC monitoring record before confirming publication.
Know when it changes.
Pro and Agency re-check daily, keep your check history, and email you when a grade drops or a certificate nears expiry.
CONFIDENCE COMES FROM EVIDENCE
Stay in control
of your mail.
Every sending service matters: your inbox provider, newsletters, invoicing and the tools your team adds along the way.
Create a free accountStart with an inventory.
Inbound mail records don’t tell the whole story. Ensign guides you to confirm your actual sending services before editing SPF.
Enforcement is a decision.
DMARC reports go to a mailbox you control. Review real mail results before moving to quarantine or reject; Ensign never escalates on a timer.
Confirm what was published.
DNS setup records the attempt, checks Cloudflare’s response and verifies public DNS. Pending propagation stays visible.
START WITH ONE. KEEP WATCH OVER MANY.
A clear view for your business.
Room for your portfolio.
Save one domain free. Monitor up to 10 with Pro, or up to 100 with Agency, in a single account.
A FEW THINGS TO KNOW
Clear expectations.
Useful answers.
Does a good score guarantee email delivery?
No. Ensign checks public configuration, not individual messages, inbox placement or every SPF lookup. A published DKIM key does not prove mail is signed or aligned. Use real messages and aggregate reports alongside the check.
Will connecting Cloudflare change my DNS?
Connecting verifies and stores your token. A separate preview and confirmation is required to create a missing DMARC monitoring record. Existing policies and unrelated DNS records are preserved.
Where do my DMARC reports go?
To the working mailbox on your domain that you select during setup. Ensign does not currently ingest or analyze DMARC aggregate reports. Review them with your mail administrator before choosing an enforcement policy.
Can I use Ensign without Cloudflare?
Yes. Checks, daily monitoring, alerts and check history work with public DNS at other providers. Guided publishing is currently available for Cloudflare.
A BETTER PLACE TO START
Know what your domain is saying.
Run a free check and see your next step.
Check my domain