Hackal Run
Email Authentication Check
Check whether your domain publishes the DNS records that make it harder for someone to send email as you. It's a quick, passive read of records that are already public.
What this checks, and why it matters
Three DNS-based controls play a role in deciding who is allowed to send email using your domain. SPF lists the servers permitted to send on your behalf. DKIM lets a receiving server confirm that a message was signed by you and arrived unaltered. DMARC ties the two together: it tells receivers what to do when a message fails, and states where to send reports.
Domains often have one or two of these missing, or have a DMARC policy set to none, which watches for forged mail but doesn't request a rejection. This check reads your public DNS and reports which records exist and what your DMARC policy instructs receivers to do.
This tool only looks at published records. It does not send test messages, inspect your mail flow, or confirm that your own outbound email passes. DKIM detection is best effort, because a DKIM record can only be found when the selector is known.
Questions
What are SPF, DKIM, and DMARC?
They are the three DNS records behind email authentication. SPF lists which servers may send mail for your domain, DKIM adds a signature that lets receivers verify a message came from you unaltered, and DMARC tells receivers what to do when a message fails those checks.
What does this check look at?
It reads your domain's public DNS: the SPF record, the DMARC record at _dmarc, and DKIM records at a short list of common selectors. It also notes whether your domain publishes MX records. DKIM detection is best effort, because a DKIM record can only be found when the selector is known.
Is this a full security audit?
No, just a quick look at your public DNS records, meant as a sanity check when you launch a new site or set up email. This doesn't send test messages or inspect your mail flow. Hackal's platform monitors your site's attack surface continuously and turns findings into prioritized fixes.
More Hackal Run checks
Beyond the spot-check
The quick look is just the start.
Unlike the tools on this page, the Hackal platform monitors your site's external attack surface continuously, and turns findings into prioritized, plain-English fixes.
See the platform