Scan each client domain before the campaign goes live.
Get a score for your SPF, DMARC, MX and BIMI records. The report shows a fix list. It does not send mail.
Lite
Free
DNS authentication scan: SPF, DMARC, MX and BIMI. Headline score and top 3 fixes.
Standard
All automated checks plus intake checks in 5 areas. HTML report and fix list.
Pro
Monitor
FAQ
What does the SIReadinessScanner.com Lite scan check?
The free Lite scan checks four DNS records for a domain: SPF, DMARC, MX and BIMI. Each check shows its status, the rule it cites, its weight and the points it lost. The result also lists the top 3 fixes.
Can I scan a client domain that I do not own?
Yes. The Lite scan accepts any valid domain name, so you can scan each client domain before the campaign goes live. Lite does not ask for an ownership TXT record. The Standard scan always needs a verified ownership TXT record.
Does the Lite scan check DKIM?
No. Lite does not check DKIM. A DKIM check needs the selectors that your sending tools use. The Standard scan asks for those selectors on the intake form and then looks for a v=DKIM1 key for each selector.
How is the Lite score calculated?
Each Lite check has a weight: SPF 15, DMARC 15, MX 5 and BIMI 5. A pass earns the full weight. A fail earns zero. A check with an Unknown result is removed from the total. The score is the share of the applicable weight that the domain earned, from 0 to 100.
What do the score bands mean?
A score of 80 or more is Ready. A score from 60 to under 80 is Ready with fixes. A score under 60 is Not ready. The score is a readiness indicator. It is not an assurance of inbox placement.
Which rules do the checks cite?
The SPF check cites RFC 7208. The DMARC check cites RFC 9989. The MX check cites RFC 7505. The BIMI check cites the IETF Internet-Draft for Brand Indicators for Message Identification (BIMI), draft-14.
What does a domain need to pass the SPF and DMARC checks?
SPF passes when the domain apex has exactly one TXT record that starts with v=spf1. DMARC passes when the scan finds exactly one TXT record at _dmarc.<domain> whose first tag is v=DMARC1. Under RFC 9989, receivers discard all DMARC records when a domain has more than one.
What do the MX and BIMI checks look for?
The MX check passes when a domain that receives mail has MX records. A send-only domain can publish the null MX record (0 .) instead. The BIMI check needs a record at default._bimi.<domain> and a DMARC policy of quarantine or reject. A domain with p=none is not eligible.
Does the scan send email or store my data?
No. The scan reads public DNS records and does not send mail. It stores nothing: no report cache, no cookies and no email capture.
Is there a limit on how many scans I can run?
Yes. The scan is rate-limited. If you scan too often in a short time, the scan stops and returns a rate-limited message. Wait a short time, then scan again.
Is the scan result legal advice?
No. The site and its reports are informational and are not legal advice. A score is a readiness indicator. It is not an assurance of inbox placement or of regulatory standing.
What does the Standard scan add?
Standard runs all automated checks plus intake checks in 5 areas. It gives an HTML report and the full fix list. Standard always needs a verified ownership TXT record for the domain.