SPF
We check whether an SPF record exists, whether it includes obvious providers and whether the all mechanism is strict or soft.
SPF DKIM DMARC
SPF, DKIM and DMARC check for business email domains
A focused check for the three core email authentication controls that reduce domain spoofing, phishing and fake invoice risk.
What SPF, DKIM and DMARC do
SPF tells receivers which servers may send mail for your domain. DKIM helps prove that messages were signed by an approved sender. DMARC tells receivers what to do when SPF or DKIM does not align. Together, they make domain spoofing harder and give your business better evidence when investigating phishing or fake invoice messages.
DKIM
We check common selectors and any selector values you provide from your email provider.
DMARC
We check whether DMARC exists, whether it is p=none, quarantine or reject, and whether reporting is configured.
Alignment
We explain why changing DMARC too aggressively before confirming senders can break legitimate mail.
When to order this check
- You use Microsoft 365 or Google Workspace
- You send invoices by email
- You use booking or payment links
- You recently changed email provider
- Customers report suspicious emails
- You want safer DMARC rollout
Buyer, input and deliverable
This check is for a business owner, domain administrator or IT provider who needs a written view of one business email domain before making DNS changes. Provide the email domain, known mail provider and any DKIM selector supplied by that provider. You receive record evidence, a plain-English risk explanation and prioritised recommendations in the Starter PDF report.
For the wider record set, see the email domain security review.
Sample output
Example record summary: "SPF: present; DKIM: selector not verified from supplied information; DMARC: monitoring policy. Priority: medium. Next step: obtain the active DKIM selector from the provider, confirm all legitimate senders and review DMARC reports before enforcement."
Important DNS note
ScanLens can review records and recommend wording, but the final DNS change must be made in the account that controls your domain DNS. For DKIM, the correct selector normally comes from your mail provider.
Included in Starter
Part of the £99 review
£99
The Starter review covers one business, one public website and one email domain, including SPF, DKIM and DMARC evidence. Delivery is within 2-3 business days after complete information and scope confirmation.
Need staff guidance?
Business Protection Setup
£399
Choose Business Protection if you want the technical check plus a staff workflow for suspicious emails and fake invoices.
Purchase FAQ
Can ScanLens publish the records?
No. The standard review does not include DNS access or implementation. Recommendations can be passed to the person who controls the domain.
Does a pass guarantee email cannot be spoofed?
No. The report is a time-specific public-record review and not a guarantee against phishing, impersonation or delivery problems.
How much is the check?
It is included in the £99 Starter review. Prices shown are the total prices. No VAT is currently charged.
Can I confirm my selector before buying?
Yes. Use the Business enquiry form and send only the public selector name, domain and provider, not credentials.