01 A Trustlayer product
MailAuthInspector
LIVEMailAuthInspector reads the DNS records that decide whether your mail is trusted - SPF, DKIM, DMARC, BIMI, MTA-STS - tells you what is wrong in plain words, and keeps watching so it stays right.
| Checks | SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT |
|---|---|
| Resolution | Live authoritative DNS |
| Reporting | DMARC aggregate (RUA) parsing |
| Integration | Microsoft 365 domain sync |
| Monitoring | Scheduled rechecks with alerts |
| Free check | Any domain, no account |
02 Why it exists
The problem, stated honestly.
Email authentication fails quietly. A record edited two years ago still resolves, still looks fine, and still sends half your invoices to junk. MailAuthInspector shows you what the receiving server actually sees.
03 What it does
SPF, DKIM, DMARC - checked and watched.
Six things, described as they behave rather than as a feature list. If one of them is the reason you are reading this page, it is the one to ask about.
SPF, DKIM, DMARC, BIMI, MTA-STS and TLS-RPT resolved live from authoritative DNS, with the raw answer kept alongside the verdict so you can see what was returned rather than take our word for it.
Includes are followed and counted. The ten-lookup limit, void lookups, a stray +all, a record split across two TXT entries - the failures that pass a glance and fail in production are named explicitly.
Read the policy you have, see what p=quarantine then p=reject would do to real mail first, and work through alignment one sending source at a time.
DMARC XML from the receivers is parsed into sending sources, volumes and pass rates, so a report nobody opens becomes a list of senders to fix or authorise.
Domains are rechecked on a schedule and you hear about it when a record changes, expires or starts failing - which is usually the week after somebody tidied DNS.
Domains sync from Microsoft 365 tenants and group by organisation, so one screen covers every client rather than one tab each.
04 Who uses it
Whose desk this lands on.
- IT and infrastructure teams
- Email and deliverability specialists
- Security teams tracking domain abuse
- MSPs auditing a portfolio of client domains
See it on your own domain.
MailAuthInspector runs at mailauthinspector.online. Everything commercial — pricing, trials, a demo with your own tenant — is handled there, or through us if you would rather talk first.