What does a DMARC checker do?
A DMARC checker looks up the _dmarc TXT record for a domain and reports its policy (none, quarantine or reject), reporting addresses and whether it's configured correctly. SiteGuard Monitor's checker shows your DMARC record alongside SPF, SSL, DNS, uptime and security headers in one explainable risk score, so you see your full email-security posture at a glance.
A missing or weak DMARC record leaves a domain wide open to spoofing — attackers can send mail that looks like it came from your client. This free DMARC checker shows the published policy so you know whether the domain is actually protected.
Why DMARC matters for the domains you manage
Without an enforced DMARC policy, anyone can forge your client's domain in phishing and invoice-fraud emails. A policy set to 'none' publishes a record but enforces nothing — a common false sense of security that this checker makes obvious.
- No DMARC means the domain can be freely spoofed
- A p=none policy monitors but blocks nothing
- Spoofed mail damages deliverability and client reputation
What this DMARC checker reports
- Whether a DMARC record exists
- The enforcement policy: none, quarantine or reject
- Aggregate and forensic reporting addresses (rua/ruf)
- Common misconfigurations flagged in plain language
See the whole email-security picture
DMARC works together with SPF and the email's signing setup. This tool runs a full free scan, so you also see the SPF record, SSL certificate, DNS records, uptime and security headers — combined into a single 0-100 risk score that tells you what to fix first.
From one check to ongoing protection
Add a domain to SiteGuard Monitor and email-security changes are tracked over time. If a DMARC or SPF record is removed or weakened, you get an instant email and Discord alert and it surfaces in the next branded client report.
- Continuous email-security monitoring across every client
- Alerts when records change or disappear
- Email-security status included in monthly reports
Read-only DNS lookups
Checking DMARC is a passive public DNS lookup — exactly what a receiving mail server does. SiteGuard performs no intrusive testing and sends no email; it simply reads the records you've published.