Home Domain security check
Domain security check for your email, website and DNS
Our domain security check shows whether someone could send email as you, whether your site would show visitors a warning, and how easy your domain would be to take. It reads public records only and takes about 15 seconds.
17 checksEmail, website and domain settings
15 secondsFor the whole check
Public recordsNothing logged in to or changed
What the check covers
What we look at
Three groups of settings anyone can read from the outside, plus the questions only you can answer.
Can someone send email as you?
Email security
SPF, DKIM and DMARC decide whether a fake email in your name reaches your clients. We also check MTA-STS and TLS reporting, which keep mail to you encrypted in transit.
Would visitors see a warning?
Website and certificate
HTTPS, the redirect from http, certificate expiry, security headers including HSTS, and any software version numbers your site announces.
Could someone take your domain?
Domain and DNS
Registration expiry, transfer lock, DNSSEC, CAA records and who hosts your DNS. Whoever controls these controls your email and website.
What can a scan not see?
Six questions about your setup
Email sign-in, every service that sends as you, who controls the domain account, renewal alerts, website updates and phishing training. Each No or Not sure answer shows what can go wrong.
Why this check
What you get from it
- Plain answers. Every result says what goes wrong without it, without jargon.
- DMARC at p=reject. That is where we set every client domain we manage.
- A person reads it. Send us your results and an engineer replies the same business day.
- Engineer-led since 2003. In Baton Rouge, working with organizations of 10 to several hundred staff.
FAQ
Frequently asked questions
Is the domain check safe to run on my domain?
Yes. It only reads public information: DNS records, your public website and published registration data. It does not log in to anything, scan your network or change any setting.
Why does DKIM say “not found at common selectors”?
DKIM keys are published under names only your mail system knows. We check the names Microsoft 365, Google Workspace and the common email platforms use. If yours uses a different name, DKIM can still be working.
What do “Fix” and “Improve” mean?
Fix is a real gap worth closing soon, such as DMARC that isn’t enforced or a certificate about to expire. Improve is a missing best practice, such as DNSSEC or a CAA record.
Can Wahaya IT fix what the check finds?
Yes. We correct SPF, DKIM, DMARC and DNS settings for our clients, and we set DMARC to p=reject on every client domain.
Run the check
Check your domain
Enter the part after the @ in your work email. Results appear here in about 15 seconds.
We only read public records: DNS, your public website and published registration data. Nothing is logged in to, scanned or changed.
Why organizations stay with Wahaya
Since 2003
Locally owned and operated in Baton Rouge
24/7
Proactive system monitoring, every day of the year
Compliance-first
Built for healthcare, nonprofits, professional firms and growing businesses