Who is allowed to send?
Review separate SPF records, syntax errors, lookup limits, nested includes, and references to services you no longer use.
Email authentication · Manual review
Know who can send
Know who can send
as your domain.
An old SPF include. An overlooked sending platform. A DMARC policy that never moved beyond monitoring. Small configuration gaps can leave your business exposed.
ConsultDNS reviews your email authentication, explains the findings, and gives you a practical plan to fix them.
For businesses, online stores, and agencies. No passwords needed to request a review.
More than a green checkmark.
A valid-looking record can still trust the wrong service. We look at the configuration and the systems you actually use.
Are messages signed correctly?
Check the selectors supplied by you or your provider. Review signing and alignment using sample message headers where available.
Does your policy fit your mail?
Review policy, alignment, reporting configuration, and subdomain settings. Plan enforcement around your legitimate senders.
Illustrative finding
A forgotten service can remain trusted.
Your SPF record may still reference a former email provider. If a referenced domain becomes available and someone else gains control, that trust could create an unauthorized sending risk.
The impact depends on the full SPF evaluation and DMARC alignment. We document those conditions instead of treating every stale record as a confirmed exploit.
Example only · not a customer finding
Stale SPF dependency
- Observation
- An include points to a service the business no longer uses.
- Validation
- Trace the dependency, check current DNS, and confirm the service with the owner.
- Recommended action
- Remove obsolete authorization after verifying legitimate mail sources, then retest.
A review, a repair, or ongoing care.
Start with the help you need. We confirm scope and provide a quote before paid work begins.
Authentication audit
Understand your current setup.
- Review of one domain and agreed senders
- SPF dependency analysis
- DKIM and DMARC configuration review
- Prioritized report and repair recommendations
Audit & repair
Turn findings into verified changes.
- Everything in the audit
- Inventory of legitimate sending platforms
- Approved DNS configuration changes
- Before-and-after checks and handover
Managed monitoring
Keep track of changes over time.
- Agreed DNS and SPF dependency checks
- DMARC aggregate report review when enabled
- Alerts for findings that need attention
- Monthly summary and recommendations
From uncertainty to a clear plan.
- Share your setup
Tell us your domain, sending platforms, and the issue you want to resolve.
- Agree on the work
We confirm the scope, deliverables, price, and timeline before starting.
- Review and resolve
Receive the findings. Choose whether your team or ConsultDNS implements the agreed fixes.
Start a conversation
Let’s review your domain.
Share a few details so we can recommend the right scope. This is an inquiry, with no payment or commitment required.
Please do not send passwords, private keys, or customer email lists. DNS changes require your approval and an agreed scope.
support@consultdns.comBefore you get started.
Is this different from the free checkers?
The free tools provide an immediate technical result. The paid audit adds a manual review of dependencies, your sending platforms, and practical recommendations for your setup.
Do you need access to my hosting account?
An initial DNS review does not require account access. We may ask for DKIM selectors, sample message headers, or reports. Implementation access is agreed separately; your own administrator can also make the changes.
Will this guarantee inbox delivery or prevent all spoofing?
No. Correct authentication helps establish legitimate sending and reduce certain impersonation risks. Inbox placement also depends on reputation, content, recipient engagement, and receiver policies.
Can you help an agency with several customer domains?
Yes. Tell us how many domains and platforms you manage so we can agree on a suitable scope and quote.
How long does an audit take?
We confirm the timeline after reviewing the domain count, sending platforms, and available information.