Checkup for

example.com

A few items to review. · 0 critical, 1 warnings

75/100

Findings & recommended next steps

DMARC in monitoring mode

Review aggregate reports and confirm your sending services before enforcement.

Keep p=none while reviewing reports. Enforcement should follow evidence from actual mail.

✓

SPF record published

Confirm every legitimate sender and review the DNS lookup limit.

✓

DKIM DNS keys found

Verify a real message to confirm signing and alignment.

Inbound mail provider hint

Example mail provider

Checked

2026-09-22 12:00 UTC · public DNS + HTTPS
DNS configuration does not prove message signing, alignment or delivery. DKIM uses common selectors; SPF includes and MTA-STS policy content need separate review.

← check another domain

Your next step

Review the aggregate reports arriving at your report mailbox. Check messages from your newsletter, invoicing and other sending services.

Ensign does not automatically change your enforcement policy.

Check your own domain