Get your domain to DMARC enforcement without breaking real mail.
Google and Yahoo have required DMARC from bulk senders since February 2024, and Gmail has rejected non-compliant bulk mail since November 2025. Blankitt shows every service sending as you, fixes SPF and DKIM, and takes you from p=none to p=reject.
Free domain check, no account required. UK public sector: NCSC Mail Check was retired on 31 March 2026. This is the UK-built replacement.
Free
domain check, with no account and no sales call
6 checks
DMARC, SPF, DKIM, DNSSEC, MTA-STS, TLS-RPT
31 Mar 2026
NCSC Mail Check retired, and teams need a home
UK-built
UK-supported, without the enterprise contract
Free DMARC Record Checker
Instantly check your DMARC, SPF, and DKIM records. Get recommendations to improve your email security.
Complete email authentication visibility
Everything you need to monitor and improve your email security posture.
DMARC Report Analysis
Automatically parse aggregate reports from Microsoft 365, Google Workspace, or any email provider.
Sender Identification
Common sending vendors detected automatically. Know exactly who is sending email on your behalf.
SPF Lookup Analysis
Track DNS lookups and get warnings before you hit the 10-lookup limit.
Policy Simulator
Preview the impact of moving to quarantine or reject before making changes.
Fix Recommendations
Get vendor-specific guidance on configuring SPF, DKIM, and DMARC correctly.
MTA-STS & TLS-RPT
Complete email security monitoring including transport encryption policies.
Full feature breakdown
Every feature is included in every plan. No hidden upsells or feature gates.
DMARC Analysis
- Aggregate report parsing (RUA)
- Forensic report parsing (RUF)
- Policy monitoring (none/quarantine/reject)
- Subdomain policy tracking
- Alignment mode detection (relaxed/strict)
SPF Analysis
- SPF record validation
- DNS lookup counter (10-limit tracking)
- Nested include resolution
- IPv4/IPv6 range analysis
- Void lookup detection
DKIM Analysis
- DKIM selector discovery
- Key length validation (1024/2048-bit)
- Signature verification
- Multi-selector support
Sender Intelligence
- Automatic identification of common sending vendors
- Authorised vs unauthorised sender detection
- Volume and trend analysis
- Geographic sending patterns
Reporting & Alerts
- Email alerts
- Webhook notifications
- Daily/weekly digest
- CSV export
- API access
Advanced Features
- Policy simulator
- Fix recommendations with vendor guides
- DNSSEC validation
- MTA-STS monitoring
- TLS-RPT support
- BIMI readiness check
Get started in four steps
Connect your email provider
Link Microsoft 365, Google Workspace, or upload existing DMARC reports.
Review your authentication status
See which services are sending email on your behalf and their authentication results.
Follow the recommendations
Get step-by-step guidance to fix SPF, DKIM, and DMARC issues.
Progress to enforcement
Use the policy simulator to safely move from p=none to p=reject.
Understand email authentication
New to DMARC? Learn the fundamentals of email authentication and why it matters.
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that protects your domain from being used in phishing attacks.
Learn moreSPF Explained
SPF (Sender Policy Framework) specifies which mail servers are authorised to send email on behalf of your domain using DNS TXT records.
Learn moreDKIM Explained
DKIM (DomainKeys Identified Mail) adds a digital signature to your emails, allowing recipients to verify they haven't been altered in transit.
Learn moreBuilt and supported in the UK by EAS Technology Consulting Ltd. UK-built and UK-supported. Your DMARC reports are encrypted and tenant-isolated, stored in Cloudflare's Western Europe region and processed on Cloudflare's network; Blankitt is a UK company, and a self-hosted edition is available when data must stay on your own infrastructure. Cancel anytime, export your data anytime.
Plans and pricing
We don't gate features. Plans differ on just two honest things: how many domains you monitor and how long we keep your history.
Every plan includes all features
Analysis
- DMARC aggregate & forensic reports
- SPF validation & lookup tracking
- DKIM selector discovery
- Policy & alignment monitoring
Intelligence
- Sender identification (common sending vendors)
- Authorised vs unauthorised detection
- Volume & trend analysis
- Geographic patterns
Tools & Integrations
- Policy simulator
- Fix recommendations
- DNSSEC validation
- MTA-STS & TLS-RPT
- BIMI readiness check
Reporting
- Email & webhook alerts
- Daily/weekly digest
- CSV export
- Full API access
Starter
or £290/yr (2 months free)
Every feature included
Get startedBusiness
or £2,490/yr (2 months free)
Every feature included
Get startedFree tier needs no card. Cancel any time from your Portal billing page.
Need more domains? +£4/mo each.
Bigger estate or want it on your own kit? Self-host for unlimited domains, or talk to us.
Self-hosted option
Keep your DMARC data on your own infrastructure. Full control, complete data sovereignty.
Licence includes:
- All features, unlimited domains
- Unlimited retention
- Docker deployment
- Air-gapped friendly
Support includes:
- Priority email support
- Security patches
- Feature updates
- Upgrade assistance
Deploy with Docker in minutes. Air-gapped environments supported.
Go deeper
Free tools, honest comparisons and sector guides, useful whether or not you ever buy anything from us.
Free email tools
no account, run them in your browser
Guides
learn the concepts and the migration
Honest comparisons
including where the alternatives win
DMARC for your sector
the same product, explained for your risks
Also in the library: what's new in DMARC · security & compliance
Check your domain's email security now
Free instant analysis. No signup required. See your DMARC, SPF, and DKIM status in seconds.
Check your domain free