Audit the SPF policy governing senders for a domain

For web teams checking a launch or tracing a fault, this test provides an immediate point of reference. Audit the SPF policy governing senders for a domain.

Audit the SPF policy governing senders for a domain. The result highlights the live configuration and the clues that matter for diagnosis.

How to use

Enter the domain you want to audit, without a protocol or a path, then start the test.
Your request is passed to the tool's server, which queries the public DNS on your behalf.
Read the result: it shows the SPF policy that was found along with the clues that matter for diagnosis.
If the published policy does not match what you expected, fix your zone and run the test again.

Example

A common case: you have just switched sending providers and want to confirm that the published policy mentions the new sender. The check shows the policy that DNS actually serves, which is more reliable than an internal note that may be out of date.

Limits and formats

The check reports what public DNS returns at that moment; a recent change may take time to appear everywhere.
It does not edit your zone and it does not replace a real delivery test to a mailbox.
A temporary DNS problem can produce an incomplete answer, so retry before concluding that something is broken.
The tool works from the value you type, not from a configuration file exported from your name server.

Where processing happens

The domain, address or URL you enter is sent to the tool's server, which then performs the DNS query itself and returns the answer to your browser. No file is uploaded, and the request is limited to the value you typed into the field.

Frequently asked questions

Can I check a domain that is not live yet?

The check relies on public DNS, so an unpublished domain will return an empty or partial answer. Wait until your zone has propagated before deciding that the configuration is wrong.

Why does the result differ from my internal records?

The test queries public DNS rather than your internal name servers. If you maintain split views, only the record visible from the outside will appear in the result.

What should I do if the test returns nothing?

Confirm the domain spelling first, then try again after a short pause. A missing answer often points to a delegation problem or to a name server that is temporarily unreachable.