All clients
Compare any report across every client you look after.
SPF, DMARC and DKIM stop other people sending email as the client's domains. MTA-STS and TLS-RPT make other servers deliver mail to them encrypted, and report when they can't.
| Client | Domain | Receives mail via | SPF | DMARC | DKIM | MTA‑STS | TLS‑RPT |
|---|---|---|---|---|---|---|---|
| Contoso Legal LLP medium | contoso.example | Microsoft 365 | Pass | Weak | Weak | Missing | Missing |
What to fix: DMARC is monitor-only (p=none); spoofed mail is still delivered; Microsoft 365 DKIM isn't set up (selector2 CNAME missing); No MTA-STS policy, so mail sent to this domain can be forced onto an unencrypted connection | |||||||
| Contoso Legal LLP low | parked.example | Doesn't receive mail | Missing | Missing | n/a | n/a | n/a |
What to fix: Doesn't receive mail but has no "v=spf1 -all" record to stop spoofing; Doesn't receive mail but has no DMARC p=reject record | |||||||
| Fabrikam Dental Group medium | fabrikam.example | Microsoft 365 | Pass | Weak | Weak | Missing | Missing |
What to fix: DMARC is monitor-only (p=none); spoofed mail is still delivered; Microsoft 365 DKIM isn't set up (selector2 CNAME missing); No MTA-STS policy, so mail sent to this domain can be forced onto an unencrypted connection | |||||||
| Fabrikam Dental Group low | parked.example | Doesn't receive mail | Missing | Missing | n/a | n/a | n/a |
What to fix: Doesn't receive mail but has no "v=spf1 -all" record to stop spoofing; Doesn't receive mail but has no DMARC p=reject record | |||||||
| Northwind Traders medium | northwindtraders.example | Microsoft 365 | Pass | Weak | Weak | Missing | Missing |
What to fix: DMARC is monitor-only (p=none); spoofed mail is still delivered; Microsoft 365 DKIM isn't set up (selector2 CNAME missing); No MTA-STS policy, so mail sent to this domain can be forced onto an unencrypted connection | |||||||
| Northwind Traders low | parked.example | Doesn't receive mail | Missing | Missing | n/a | n/a | n/a |
What to fix: Doesn't receive mail but has no "v=spf1 -all" record to stop spoofing; Doesn't receive mail but has no DMARC p=reject record | |||||||
Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.