Can someone send email as your company?
Two DNS records decide whether a mail server believes an email really came from you. Most companies have one, many have neither, and very few have both set to block fakes. This check reads yours in a few seconds.
Mail servers have no instructions for fake email from yourcompany.com.
Email and Domain Protection fixes this on every domain you own. $750, done in two weeks, then 90 days of watching the reports. What's included
This is an example. Type your own domain and press Run. The check runs in your browser and nothing is stored.
What the results mean
SPF lists the servers allowed to send mail for your domain. Missing it means nobody has said who's allowed.
DMARC tells receiving servers what to do with mail that fails the check. A policy of none only watches. quarantine sends fakes to spam. reject refuses them outright, which is where you want to be.
Getting to reject safely takes care, because every legitimate sender has to pass first: your email provider, your invoicing system, your newsletter tool, the CRM someone set up in 2019. That inventory is most of the work.
What we do about it
Email and Domain Protection is a fixed $750 for every domain you own, parked ones included. Two weeks of setup, then 90 days of reading the reports and adjusting until your real mail passes and the fakes don't.
Privacy
The check runs in your browser and asks Cloudflare's public DNS resolver for your records, the same lookup any mail server makes. The domain you type isn't sent to us and isn't stored.