Comments
>log in to commentHi everyone, I'm Konstantin, founder of Raileon in Miami. We kept finding small businesses whose domains let anyone send email in their name. That's how fake invoices and wire-instruction emails get through. When we checked 749 South Florida law firms and real estate offices, about 8 in 10 weren't blocking it. So we built a free checker. Type a domain and it reads the public SPF, DKIM and DMARC records, tells you in plain English what's missing, and gives you the exact record to add. No sign-up. I'd love feedback on what would make it more useful for developers and IT folks.
Free tool that checks a domain’s SPF, DKIM and DMARC records and explains the results in plain English.
- for
- Businesses and developers who need to verify email authentication settings.
- pricing
- free
Key features
- Domain check — Enter a domain or email address and the tool reads its public DNS records.
- SPF analysis — Shows which services are allowed to send mail and flags weak or open settings.
- DKIM analysis — Looks for common DKIM selectors and reports if a signature is present.
- DMARC analysis — Displays the DMARC policy and indicates whether mail is protected, quarantined or rejected.
- Plain-English report — Provides a protection rating and step-by-step fix instructions.
- No sign-up — Runs instantly in the browser without creating an account.
- Fast results — Delivers the check in seconds using only public DNS data.
Use cases
- Validate email authentication before launching a new website or campaign.
- Detect if a domain is vulnerable to spoofed emails.
- Include the check in a security audit of a business’s online presence.
- Troubleshoot why legitimate emails are landing in spam.
- Generate a quick report for stakeholders on email protection status.
Raileon Email Security Check vs alternatives
 Raileon Email Security Check |  Snyk |  Decloak - Web security intelligence |  aikido | ||
|---|---|---|---|---|---|
| Best for | Quick SPF/DKIM/DMARC health check | Finding and fixing code vulnerabilities | Open-source vulnerability and misconfig scanner | General web security intelligence | AI-driven dev security guidance |
| Pricing | Free | Subscription | Free | Free | Free |
| DevHunt upvotes | 1 | 0 | 0 | 10 | 65 |
| Launched | Aug 2031 | — | — | Oct 2026 | Dec 2024 |
- Raileon Email Security Check vs Snyk: Focuses on code and container vulnerabilities, not email authentication records.
- Raileon Email Security Check vs Trivy: Scans for misconfigurations and secrets in code repositories, not DNS-based email settings.
- Raileon Email Security Check vs Decloak - Web security intelligence: Provides broader web security intelligence rather than specific SPF/DKIM/DMARC checks.
- Raileon Email Security Check vs aikido: Offers AI-assisted security advice for developers, not a DNS-based email check.
Raileon Email Security Check FAQ
Is the email security check free?+
Yes, there is no cost and no sign-up required.
What do SPF, DKIM and DMARC do?+
SPF lists authorized senders, DKIM adds a cryptographic signature, and DMARC tells inboxes how to handle messages that fail the other two.
How does the tool decide if a domain is protected?+
It bases the result primarily on the DMARC policy, considering SPF status; DKIM does not affect the protection rating.
Why might DKIM be reported as missing?+
The tool checks only common selector names; if a domain uses a different selector, DKIM may still be set up but not detected.
Is any data stored or sent?+
Only public DNS records are read; no email is sent and results are not stored unless the user opts to receive them by email.
Can Raileon fix the issues for me?+
Yes, they offer a free 20-minute call to set up SPF, DKIM and DMARC and verify delivery.
Summarized by DevHunt from raileon.com · Oct 20, 2026. Details may change; check the official site.
