Free tools

Is your email safe to trust?

Two free checks for the way most small-business scams start: email that pretends to be you, or someone you pay.

Email setup check (SPF, DMARC, DKIM)

Can someone send email that looks like it's from your domain? Enter any domain: we read its public records and explain what we find, including how many of SPF's 10 allowed lookups it uses.

Suspicious email? Check its headers

Paste the full headers of an email (in Gmail: ⋮ → Show original; in Outlook: File → Properties, or ⋯ → View → View message source). Everything is analysed in your browser: nothing is sent to us.

Analyse

Want this watched every day?

Superlock checks your domain daily, reads your DMARC reports for you, and alerts you the moment something changes, plus a look inside Microsoft 365, Google, Stripe, Shopify, Xero, QuickBooks and more. Start free.

Don't want Superlock to scan your domain?

Add a TXT record with the value superlock-optout at your domain (the "@" name). Superlock's free scanner and app will refuse to check it from then on. Remove the record to undo it.