How exposed is your business domain?
A passive review of your email and DNS configuration (SPF, DKIM, DMARC, MX and more). No active scanning and nothing to install — the report is emailed to the business address you provide.
The check uses publicly available DNS information only. We keep nothing beyond your enquiry details.
What the check looks at
This check is for Australian businesses that want a clearer view of how their domain is configured for email. It is useful when you manage Microsoft 365 or another mail service, are reviewing email security, or want a practical starting point before discussing managed protection.
The tool reads public DNS records associated with the domain you enter. It reviews SPF, DKIM and DMARC signals used to identify authorised senders and help receiving systems handle suspicious messages. It also checks MX information, which identifies the systems responsible for receiving email for the domain.
Because the review is passive, it does not log in to your systems, install software or actively scan your network. It cannot inspect mailboxes, endpoints, user activity or private security settings.
How it works
- Enter the business domain you want reviewed, without a page address or email username.
- Add your contact details so the tool can send the report to the business email address provided.
- Agree to receive the report and related information, then start the check.
- Review the on-screen grade, score and findings, grouped by their level of severity.
- Use the emailed report as a starting point for reviewing the domain configuration or asking CyberOM for help.
What you receive
The results identify the domain checked and present an overall grade and score. Individual findings are labelled Critical, High, Medium, Low or Pass so you can distinguish configuration gaps from checks that passed. Where the tool can identify the mail provider from public information, that provider is shown too.
The report is a focused view of publicly visible email and DNS configuration. It is not a complete security assessment and does not guarantee that a domain, mailbox or organisation is secure. If you want help interpreting the findings, the results page links directly to the CyberOM contact page.