Can anyone send email as your business?
Unless three small DNS records are set, anyone can send an invoice that looks like it came from you, and your real emails land in spam more often. Check your domain free, in seconds.
We only read public DNS records, the same ones any mail server reads. Nothing you type is stored.
Most small business domains are open.
58%
of the small service-business domains we checked in October 2026 that use their own domain for email had no DMARC or no SPF record: nothing tells mail servers to reject a forged email "from" them.
Since 2024, Gmail and Yahoo also check these records on incoming mail. Domains without them look less trustworthy, so their real emails are more likely to be filtered.
Three records, in plain words.
Who may send as you
A list of the mail servers allowed to send email for your domain, such as Google Workspace or Microsoft 365.
A signature on every email
Your email provider signs each message, so receivers can tell it really came from you and wasn't changed on the way.
What to do with fakes
Tells receiving servers what to do with email that fails those checks, and sends you reports on who is using your name.
Safe, step by step.
We check
We read your domain's public records and see which email service you use and where your DNS is managed.
You get the exact steps
The exact records to add, written for your DNS provider (GoDaddy, Cloudflare, Squarespace, Wix and others), showing exactly where to click.
We re-check until it passes
We check again every day until everything passes, and tell you when it does. If you get stuck, we help by email.
- We never need your passwords or a login to anything
- New protection starts in monitoring mode, so nothing that works today can break
- Works with Google Workspace, Microsoft 365, Zoho and most other providers
- You stay in control: every change is made by you or your IT person
One fix. Optional watch.
Prices in USD, for businesses.
Fix
- Exact SPF, DKIM and DMARC records for your setup
- Steps for your DNS provider
- Daily re-check until everything passes
- Email help if you get stuck
Fix + Monitoring
- Everything in Fix
- First month of monitoring free
- A monthly report of who sent email as you
- An alert if someone fakes your domain
Monitoring
- For domains that already have the basics
- Monthly "who sent as you" report
- Spoofing alerts
- Cancel anytime
Monitoring renews monthly until you cancel.
FAQ
Is the free check safe?
Yes. It only reads public DNS records, the same ones every mail server reads when you send an email. It doesn't touch your email, website or accounts, and we don't store the domains people check.
Can the fix break my email?
It's designed not to. We build your SPF record from the email services your domain actually uses, and DMARC starts in monitoring mode, which reports problems but blocks nothing. Stricter settings come later, only once reports show it's safe.
Do you need access to my accounts?
No. We never ask for passwords. You (or whoever manages your website) add the records using our steps.
What if my DNS provider isn't listed?
The records are the same everywhere; only the screens differ. We send general steps and help by email.
What does monitoring actually do?
Mail servers like Gmail and Outlook send DMARC reports about email that claims to be from your domain. We read them every day and send you a short monthly summary, plus an alert if someone is clearly faking your address.
Do I need this if I use Gmail or Outlook?
If your email address ends in your own domain (you@yourbusiness.com), yes: these records are set on your domain, not by your email provider. If you use a plain @gmail.com address, your domain isn't involved.
Questions? Ask us.
Prefer email? Write to daan.colson@getmailgatehouse.com