Email authentication monitoring for IT & email teams

Find what’s putting your email delivery at risk.

A new sending tool. An old DNS record. A service that stopped authenticating. Ray helps you find the problems, identify the sender, and understand what needs to change.

Your free check examines published email authentication records and detects sending services in DNS.

No signup No DNS access Free DNS check

Need sender history and alerts? Start monitoring · Business plans from $25/mo

Ongoing monitoring Sample data
Domain overview example.com
Monitoring
12Senders found
2Need attention
92%DMARC pass rate
Action needed Klaviyo is failing DKIM alignment

Messages are being signed, but the domains do not match.

M Microsoft 365SPF and DKIM aligned Passing
K KlaviyoDKIM alignment issue Review
? Unknown senderFirst seen today Review

Illustrative monitoring view. Sender activity and pass rates become available after you connect DMARC reporting.

Read-only by design No email content stored Every domain and subdomain SPF, DKIM, DMARC + TLS

From “is something wrong?” to “here’s what to fix.”

Your email tools change.
Your authentication needs to keep up.

Sales, marketing, support, and billing can all send as your domain. Ray brings their authentication signals together so you can see where to investigate.

Find the senders you need to review.

Combine services detected in DNS with sender activity in DMARC reports. Investigate unfamiliar IPs, forgotten tools, and services failing authentication.

Service identification · Sender breakdowns · Subdomain discovery

See where authentication breaks.

Check SPF lookup limits, DKIM configuration, and DMARC policy. Use per-sender results to identify which service needs attention.

DNS analysis · SPF and DKIM alignment · DMARC results

Keep watch after the fix.

DNS records and sending services keep changing. Hourly DNS checks and email alerts help you spot configuration changes, while report history shows authentication trends.

Hourly DNS checks · Email alerts · Authentication history

Start with one domain

A useful answer now.
A clearer picture over time.

  1. 1

    Check your domain free.

    Enter a domain to inspect its public DNS records. See authentication findings and detected services without creating an account.

    Check my domain →
  2. 2

    Connect DMARC reporting.

    Create your account, verify your domain, and add Ray’s reporting address to your DMARC record. You make the DNS changes with your existing provider.

  3. 3

    See senders. Track changes.

    As mailbox providers send reports, Ray shows sender activity and authentication results. DNS monitoring and email alerts help you keep up with changes.

Built to fit your infrastructure

Your DNS stays yours.
Your data stays accessible.

Ray analyzes your configuration and reports. You decide what to change, and make those changes where your DNS already lives.

Explore Ray’s security approach →
No DNS credentials required
Keep your DNS provider and control of your authentication records.
No email content stored
Ray uses aggregate authentication reports, rather than reading your inbox or storing message bodies.
Unlimited domains and users
Business plans start at $25/month, with API access and data export included. Pricing scales with DMARC-passing message volume.

See the analysis for yourself

Try it on your own domain.

The free check gives you a concrete starting point. For a broader view, explore Ray’s public DNS Census and its email authentication findings across more than a million domains.

DNS Census is public research coverage, not a customer count.

Before you start

A few things worth knowing.

What’s free, and what’s paid?

The free domain check analyzes public DNS records. Ongoing monitoring adds DMARC report processing, sender history, hourly DNS checks, and email alerts. Business plans start at $25/month. Compare pricing and message limits.

Will a free check show everyone sending as my domain?

A DNS check detects services in your published records. Seeing actual sender activity requires DMARC reports from mailbox providers. Connect reporting in Ray to build that view as reports arrive.

Do I need to move my DNS or email provider?

No. Keep your existing providers. To enable monitoring, you verify your domain and configure its DMARC reporting address. Ray does not need credentials for your DNS account.

Will Ray guarantee that my email reaches the inbox?

No. Authentication is one part of delivery. Ray helps you find authentication problems; sender reputation, message content, recipient engagement, and mailbox-provider policies also affect where email lands.

Does Ray change records or fix problems automatically?

No. Ray shows findings so you can investigate and make changes with your DNS or email provider. It does not manage your DNS, flatten SPF records, or process forensic reports containing email content.

Start with the domain your customers know

See what your email setup
is telling you.

Get your free DNS check. No account or DNS credentials required.

Check my domain free

Already know you need monitoring? Create your account →