Bounded record lookup
The public DNS tool returns its contracted A, AAAA, MX and TXT groups and exact negative or resolver-error states. It does not issue a mail-security verdict.
Open free toolsStable API product
Mail Security, with coverage and uncertainty left visible.
Separate exact public records from posture checks and evidence-backed findings. Missing, unchecked, and unavailable checks remain different states—none becomes an automatic all-clear.
Free and full
Two depths, one truthful interpretation model.
Start with a limited record view, then move to the retained full recipe when you need policy validation, findings and evidence links.
Full Mail Security recipe
Retained topology, authentication and transport checks add lane progress, evidence-linked findings and unavailable-check explanations.
Discuss API accessIncluded checks
Know what was collected and what was assessed.
These lanes and bounds come directly from the generated product catalogue.
Server topology
Dns
Authentication records
Dns
Dkim selectors
Mail security
Transport policy
Mail security
DKIM checks are bounded to at most 8 configured and catalog selectors. A selector not found in that disclosed set does not prove that no other active selector exists.