Enter a domain to check its SPF, DMARC, and MX records. Misconfigured email lets attackers spoof your domain and phish your users. Runs a real DNS-over-HTTPS lookup — nothing is stored.
Example: try google.com or your own domain.
Your app may also be leaking API keys, missing row-level security, or running with no error tracking. Get the full Launch Readiness Score in ~60 seconds.
Get my free score