Know what changed.
See what needs attention.
Ray brings DNS checks and DMARC reports together so your IT team can investigate sending services, track authentication failures, and decide what needs to change.
Check public DNS records and detected sending services. No signup or DNS credentials required.
Ready for ongoing monitoring? Create your account · View pricing
DNS configuration.
Actual sender activity.
Public DNS tells you how a domain is configured. DMARC reports show how observed messages authenticated. Your team needs both to investigate a problem and check whether a change helped.
Ray checks monitored domains hourly and brings authentication results together as reports arrive from mailbox providers. Review SPF lookup limits, DKIM configuration, DMARC policy, and the sending services that need investigation.
Keep your existing DNS and email providers. Ray reads published records and aggregate reports; your team controls the changes. See how Ray handles your data →
Built for IT Operations
Domain and email authentication monitoring designed for the people who manage the infrastructure.
Domain Intelligence
Review SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI findings for the domains you add to Ray. Bring business units and legacy brands into one view, across DNS providers.
Subdomain Discovery
Discover sending subdomains observed in DMARC reports, including ones your team may have forgotten. Coverage grows with the reports Ray receives; it is not an exhaustive inventory of every subdomain.
SPF/DKIM/DMARC Monitoring
Hourly DNS checks help you spot configuration drift, SPF lookup-limit problems, and policy changes. Use reported SPF and DKIM alignment results to investigate authentication failures.
REST API & Export
Pull domain, report, and intelligence data into your scripts and runbooks through Ray’s REST API. API access and data export are included on every business plan.
Alerting
Receive email alerts for monitored DNS changes and supported authentication findings. Use the evidence to investigate with your team; an unfamiliar sender needs review before it can be classified as unauthorized.
TLS-RPT & MTA-STS Analysis
Inspect published MTA-STS configuration and review TLS-RPT reports for reported transport-security failures. Ray analyzes your setup; you keep control of policy hosting and DNS.
Multi-Org Access Control
Organizations with member, admin, and owner roles, backed by DNS-based domain verification. Delegate access to business units or clients without sharing credentials. Available on every plan.
Start with a check.
Keep watch with monitoring.
-
Check your domain.
Inspect public email authentication records and services detected in DNS. Get a starting point without creating an account.
Check my domain → -
Connect reporting.
Create your account, verify your domain, and add Ray’s reporting address to your DMARC record. Your DNS administrator makes the changes with your existing provider.
-
Review results over time.
As mailbox providers send reports, review sender activity and authentication results. Hourly DNS checks and email alerts help you track changes.
Start with a domain your team manages.
Check public DNS for free. Connect reporting when you’re ready for ongoing monitoring.
Check my domain freeReady to monitor? Create your account →