Fix authentication gaps.
Start with a free DNS check. Review SPF lookup limits, available DKIM records, and your DMARC policy.
FREE SPF, DKIM & DMARC CHECK · ONGOING MONITORING
Fix email authentication. Keep good email moving.
Protect the domain. Power the next send. Choose your starting point.
IT PROFESSIONALS
Protect your domain.
Protect your domain.
Keep email moving.
Investigate unknown senders.
Fix the gaps. Keep legitimate email working.
EMAIL MARKETERS
Fix the setup.
Fix the setup.
Send with confidence.
Catch authentication issues before a campaign.
Give your team the next move.
FROM “WHAT’S BROKEN?” TO “WHAT’S NEXT.”
One domain.
A clear way forward.
Start with the records you can check today. Add sender evidence and ongoing monitoring when you’re ready.
- 01 / CHECK
Spot the authentication gaps.
Get a free public DNS check for SPF, DKIM, and DMARC configuration issues.
- 02 / ACT
Give the right person the fix.
Take the finding to your DNS owner or sending-platform team. Make the change where your tools already live.
- 03 / MONITOR
Keep good senders working.
Connect DMARC reports to investigate senders. Monitor DNS changes and get email alerts.
EMAIL SECURITY & DMARC MONITORING FOR IT
Protect your domain.
Keep good email moving.
Find SPF, DKIM, and DMARC gaps. Connect reports to investigate unknown senders and plan enforcement around your legitimate email.
DOMAIN CHECK01
starforge.exampleYour DMARC policy
POLICY TO REVIEW
Your DMARC policy
is monitoring only.
_dmarc
v=DMARC1; p=noneThis policy does not ask receivers to quarantine or reject messages that fail DMARC.
Evidence first.You control the changes.
A monitoring policy can be an intentional first step.
A CLEAR PATH TO STRONGER PROTECTION
Find the failure.
Work the right fix.
Start with one domain. Connect monitoring when you need the bigger picture.
Investigate unknown senders.
Connect DMARC reports. Separate legitimate services that need a fix from unfamiliar sources that need investigation.
Move toward enforcement.
Review your legitimate senders before tightening policy. Watch authentication history and hourly DNS checks after the change.
AFTER YOUR FREE CHECK
Get alerted when your email authentication changes.
Connect reporting, review senders, and keep watch with hourly DNS checks. Monitoring plans start at $25/month.
ALSO BUILT FOR THE TRANSPORT LAYER
MTA-STS, without another web server.
Ray can host your inbound mail-transport policy. You control DNS and policy settings; TLS reports help you investigate reported connection failures.
Find the gaps.
Make your next move.
Check my domain free No account. Your team stays in control.
BEFORE THE NEXT CAMPAIGN
Fix the setup.
Send with confidence.
Catch SPF, DKIM, and DMARC issues before the next campaign. Bring your team a specific finding and a clearer next step.
S
starforge.exampleFree domain check / example
YOUR NEXT STEPAsk your DNS owner to add
a DMARC monitoring policy.
a DMARC monitoring policy.
LESS BACK-AND-FORTH. A CLEARER NEXT MOVE.
Keep your platform.
Lose the guessing.
You don’t need to become a DNS expert to start a useful conversation.
Check your sending domain.
Start with public DNS records to spot authentication configuration issues. No account needed.
Turn the finding into a fix.
Review the finding with the person who manages your domain or email platform. Your team makes the changes.
Keep your sending setup in view.
Connect DMARC reports to see observed authentication failures across your sending services.
AFTER YOUR FREE CHECK
New campaign.
Fewer unknowns.
Connect DMARC reporting to see sender activity. Add ongoing DNS monitoring and email alerts, from $25/month.
Explore monitoring plansS
Starforge / Launch campaignSender investigation
- SPF
- Passes, but not aligned
- DKIM
- Fails
- DMARC
- Fails
BRING YOUR TEAM A CLEAR NEXT STEPReview this sender’s
DKIM and alignment setup.
DKIM and alignment setup.
Sender activity needs reporting setup; it is not part of the free DNS check.
ONE IMPORTANT DISTINCTION
Better authentication is a foundation.
Inbox placement also depends on reputation, content, and engagement. Ray helps you understand authentication; it does not measure or guarantee inbox placement.
Check the domain
behind your send.
Check my domain free No account. No platform switch.
THE FOUNDATION OF A GOOD SEND
Email authentication.
Clear enough to act on.
Three protocols. Different jobs. Ray brings the findings together so your team can work on the right fix.
Authorize the right senders.
Check the services in your SPF record and spot DNS lookup-limit issues that can break authentication.
Understand SPF checksGet your signatures right.
Review DKIM configuration. Use connected DMARC reports to investigate signing and alignment failures.
Understand DKIM alignmentProtect the domain in From.
Review your policy and legitimate senders before moving toward quarantine or reject. Keep watch as things change.
Understand DMARC monitoringGO BEYOND AUTHENTICATION
Explore MTA-STS & TLS-RPT Secure the connection, too.
MTA-STS publishes your inbound TLS policy. TLS-RPT helps reveal reported transport-security failures.
GOOD QUESTIONS. STRAIGHT ANSWERS.
Know what you’re
getting into.
Start free. Add monitoring when you need the history and the heads-up.
Compare monitoring plansWhat does the free email authentication check show?
Ray inspects public DNS records for SPF, DKIM, and DMARC configuration findings and detected sending services. DKIM discovery depends on available selectors. The check does not read your inbox or show every actual sender. No account or DNS credentials are required.
How does DMARC monitoring help keep good email working?
After you connect reporting, Ray shows observed senders and authentication results from mailbox-provider reports. Investigate unfamiliar sources, fix legitimate services that fail alignment, and review the results before tightening your DMARC policy. Monitoring plans start at $25/month.
Can Ray help prevent domain spoofing?
DMARC enforcement can ask receiving systems to quarantine or reject messages that fail DMARC for your domain. Ray helps you review the evidence and plan that move. Your team controls DNS and enforcement; Ray does not automatically block senders or change your DNS records.
Will this guarantee inbox placement?
No. Authentication supports trustworthy sending, but reputation, content, recipient engagement, and mailbox-provider decisions also affect delivery. Ray helps you investigate authentication issues; it is not an inbox-placement test.
Do I need to switch email platforms or DNS providers?
No. Keep your existing tools and DNS provider. You add the required reporting records with your provider, and Ray reads public DNS and aggregate reports. See Ray’s security and data-handling approach.