Email Deliverability Audit
Check your SPF, DKIM and DMARC setup in seconds
Can providers prove your mail is really from you?
SPF, DKIM and DMARC are the three DNS records that let a receiving server check whether a message really came from your domain. What any receiver then does with a message that fails those checks is its own policy, which these records request but do not control.
Encryption and brand-trust signals
These three records do not authenticate the mail you send. MTA-STS asks servers that deliver mail to you to use an encrypted, verified connection. TLS-RPT asks them to report to you when that fails. BIMI publishes a logo that a mailbox provider may choose to display.
Is your domain in good standing?
Authentication earns trust; reputation keeps it. This covers mail routing, blocklist status, and whether you have ongoing visibility into how providers rate you.
i How we test, and what this score does not claim ▶
What we check
- SPF, DKIM and DMARC DNS records and their policy strength
- MX records and mail-routing resolution
- Real-time blocklist (RBL) listings for the domain and sending IP
- MTA-STS, TLS-RPT and BIMI transport / brand-trust records
What the score is
- A readiness score for how well your domain is set up to be trusted by mailbox providers, weighted toward the authentication records that matter most.
Do these in order.
Highest-impact first. The critical records take only minutes combined and close the gaps providers care about most.
What would filtered mail cost you?
A rough estimate, in your numbers. The sliders start at placeholder numbers — replace them with your own. This models opportunities lost when mail is filtered, not a measurement of your actual placement.
Close these gaps before your next campaign.
Humerly gives you the exact records to paste, and re-checks them every month if you opt in.