Give it domains. For each it reads SPF, DMARC, DKIM and MX over keyless DNS-over-HTTPS and composes an anti-spoofing posture with specific findings and a signal (protected / mostly-protected / monitoring-only / spoofable / no-email-configured). Read-only DNS, agent-callable. One search per call (result caps in the input schema); failed lookups are not charged.

Payment Options