Know your domain broke before Google tells your prospects.
DNS fails silently: a stray SPF record, an expired DKIM key, a missing DMARC policy, and your email quietly stops landing. The Domain Health Center scores SPF, DKIM, DMARC, and MX on every connected inbox, watches them 24x7, and hands you the exact fix when something breaks.
Empowering 1,000+ sales leaders and representatives to build a stronger sales pipeline.
Two domains, one silent difference
Both senders wrote the same email. Only one of them was ever going to be read.
SPF, DKIM, DMARC, MX: scored, explained, fixable
Each check is one point of the score, and each comes with what it means and how to fix it, in words a seller can act on.
Which servers may send as your domain. The check catches the classic silent killer: a second SPF record that makes providers ignore both.
Your domain's signature on every email. Enter your own DKIM selector, and the guide walks through creating keys in the Google or Microsoft admin console.
The policy that tells providers what to do with failures. The guide generates your DMARC value, so you paste a record instead of writing one.
Where your mail arrives. Verified as configured, with Google and Microsoft creating records automatically once the domain is verified.
Every failing check opens into a walkthrough
Most tools tell you DMARC failed and wish you luck. Here, the score and the fix live on the same screen.
- Provider-specific paths for Google Workspace and Microsoft 365, down to which admin screen holds the DKIM button.
- Values generated for you: the SPF record to paste, the DKIM keys to create, the DMARC value ready to copy.
- Registrar-agnostic steps for everything else, written for someone opening DNS settings for the first time.
Every inbox and domain, one health view
Teams that send at volume run many inboxes across several sending domains. The fleet view keeps all of them honest at a glance.
- Search and filter across every connected inbox, by name or by provider: Google, Microsoft, SMTP.
- Status at a glance: Completed, Pending, All Good, with the pending count on each check.
- Beyond DNS: sender profile name and picture, plus your custom tracking domain status, checked alongside the records.
A free DNS checker vs a watchtower
Healthy DNS is the foundation, not the finish
The Domain Health Center watches the foundations. Two more layers carry the sending.
Build the reputation
A healthy domain is the foundation. Warm-up inside a 10,000+ real inbox network builds the sender reputation on top of it.
Email warm-upEnforce the sending
Live validation, paced sends, and bounce auto-pause protect the domain on every campaign email.
Deliverability optimizerThen earn the reply
Delivered is the floor, not the goal. Sequences with research in every step do the rest.
See sequencesDomain health with Salesgear, answered
What does the Domain Health Score check?
Four things, scored per domain: SPF, DKIM, DMARC, and MX records. Each check is a point, so a 4 of 4 means your authentication is fully configured. The score sits under every connected inbox, next to sender profile checks and your custom tracking domain status.
What are SPF, DKIM, and DMARC in plain words?
SPF says which servers are allowed to send as your domain. DKIM signs each email so providers can verify it was not tampered with. DMARC tells providers what to do when a message fails those checks. Gmail and Microsoft expect all three from senders, and missing ones quietly push your email toward spam.
A check is failing. What do I actually do?
Open the failing check and follow the steps: sign in to your registrar, open DNS management, add the exact record shown. There are dedicated walkthroughs for Google Workspace and Microsoft 365, including creating DKIM keys from the admin console and generating a DMARC value, with a field for your own DKIM selector. Written for someone who has never touched DNS.
Is this a one-time test or continuous monitoring?
Continuous. SPF, DKIM, and DMARC are monitored 24x7, because DNS breaks quietly: a registrar migration, a stray second SPF record, an expired key. The point is to know before your reply rates do.
Which email providers does it cover?
Gmail and Google Workspace, Microsoft and Office 365, and any inbox connected over SMTP and IMAP. The fleet view lists every connected inbox with its authentication status, searchable and filterable by provider.
What affects deliverability beyond DNS records?
The checks also cover your sender profile, name and picture, because providers score sender identity, and your custom tracking domain, so tracking links carry your reputation instead of a shared domain's. Pair the health checks with email warm-up to build reputation, not just verify configuration.
Score your domain in the next five minutes
Connect an inbox and see your SPF, DKIM, DMARC, and MX status, with the fix for anything that fails. Free account, no credit card.
Get started for free