• SPF — which servers may send email as your domain. Think of it as a staff list at the back door: it tells receiving mail servers which machines are allowed to send email for your company, so your genuine messages are recognised.
• DKIM — digital signatures that prove your email is genuine. Like a tamper-proof seal on a parcel: your email provider stamps each message with a signature, so recipients can verify it really came from you and wasn't altered in transit.
• DMARC — policy that stops scammers pretending to be you. This is your "no trespassing" sign. It tells other mail servers what to do with messages that pretend to be from your domain — so fake invoices and phishing emails are stopped before they reach your customers.
• Blocklists — whether your domain is flagged as spam. A quick health check against known spam blacklists, so you can see at a glance whether your domain's reputation is clean or needs attention.

The audit is completely passive — it only reads your domain's public records. We never access your mailbox, we never change anything, and nothing you send is affected. It takes about 30 seconds, and no data is stored.