Google Public DNS
Based on DNS configuration, email security, and security checks
Adequate security, improvements recommended
The quick scan stays fast. Run deeper checks for mail transport, SPF complexity, BIMI readiness, or sender compliance.
Map this scan onto the ten NIS2 Article 21.2 measures and get a 0-100 readiness score with per-measure detail.
Create a fixed Markdown report with DNS, mail, web, blacklist, sender, citation, timestamp, and hash evidence.
Live MX handshake, STARTTLS support, certificate trust, hostname match, and FCrDNS.
See every include and redirect that counts toward the 10-lookup SPF limit.
Validate the BIMI TXT record, hosted SVG logo, and mark-certificate URL before spending money.
Check reverse DNS and forward confirmation for every mail-server IP in clustered or round-robin setups.
Check Google/Yahoo/Microsoft sender expectations, blacklist posture, and authentication gaps.
Weekly updates and alerts keep DNS or mail changes from going unnoticed.