See which client domains are wide open to email spoofing
Continuous SPF and DMARC checks that reveal which domains can be impersonated and which are protected.
What is email security monitoring for SPF and DMARC?
Email security monitoring checks a domain's SPF and DMARC records to confirm it's protected against spoofing and that legitimate mail is authenticated. SiteGuard Monitor evaluates these records across all client domains, flags missing or weak policies, and reports the risk, helping prevent impersonation and protect email deliverability.
Most domains have no real protection against email spoofing, and their owners have no idea. Without proper SPF and DMARC, anyone can send mail that looks like it came from your client. SiteGuard Monitor checks these records across every domain and shows you exactly where the gaps are.
The problem: spoofable domains are everywhere
SPF and DMARC are invisible until something goes wrong. A domain without them can be impersonated in phishing attacks, and legitimate mail can land in spam. Clients rarely know their status, and agencies rarely have time to audit it by hand.
How SiteGuard solves it
SiteGuard reads each domain's email-authentication records and grades them, showing in plain language whether a domain is protected, partially protected, or wide open. It's an instant audit you can run across your whole client base.
- SPF record presence and validity
- DMARC policy detection and strength
- Plain-language pass/fail per domain
- Continuous re-checks with change alerts
What gets checked
SiteGuard inspects the published DNS records that govern who can send mail as a domain and what happens to messages that fail authentication.
- SPF record existence and syntax
- DMARC record presence and policy (none, quarantine, reject)
- Alignment between configured email security and DNS
- Changes over time, with alerts when records shift
Example workflow
Run a scan and immediately see which domains need attention.
- Add the client domain to your dashboard
- Scan to grade current SPF and DMARC posture
- Get alerts if records change or weaken
- Show the email-security status in the monthly report
Why agencies use it
Email security is an easy, high-impact upsell. Showing a client their domain is spoofable is a concrete reason to act, and fixing it is a billable win that protects their brand and their deliverability.
- Turn invisible risk into a clear client conversation
- Create natural upsell and remediation work
- Protect clients from impersonation and phishing
- Improve legitimate email deliverability
Safe, passive checks
SiteGuard reads the SPF and DMARC records that are already published in public DNS. There's no mail sending, no probing, and no impact on the domain, just a read-only assessment of what's configured.