Transparency

How the EmailMeNow audit works

Our audit queries publicly available DNS records and web security headers for your domain. No agent install, no mailbox access, and no signup required for the free scan.

1

You enter a domain or email address

We extract the domain (e.g., yourfirm.com) and begin a live lookup. The free scan completes in about 30 seconds.

2

We check public email authentication

SPF, DKIM selectors, and DMARC policy are evaluated against current best practices, including alignment and enforcement level.

3

We review transport and web exposure

TLS configuration, security headers (HSTS, CSP where present), and common misconfigurations that affect spoofing and phishing risk.

4

You get instant results

A summary score with pass/fail indicators. We save the report and scores so you can return to results later and so we can track changes over time. Unlock the Full Audit Report with Fix Kit steps and compliance mapping for $99 if you need documentation for SB 2610 or client questionnaires.

What we check

SPF Sender Policy Framework — who is authorized to send mail for your domain
DKIM DomainKeys Identified Mail — cryptographic signing of outbound messages
DMARC Policy for handling messages that fail SPF or DKIM alignment
MX & mail routing Where inbound mail is delivered and whether records are consistent
TLS / STARTTLS Whether mail transport supports encrypted delivery
Security headers HTTP headers that reduce browser-side attack surface

What we do not do

  • We do not log into your email or cloud admin consoles
  • We do not scan internal networks or endpoints
  • We do not sell domain lookup data to third parties
  • We do not provide legal advice — our tools support documentation, not attorney-client privilege

What we keep

  • For each free scan: the domain, scores, and full report HTML for about 180 days
  • Domain and scan scores in our database over time, so repeat scans can show how results change
  • Paid unlocks and Watch plans: contact details, order records, and report data needed to deliver the product and for business and tax records
  • Questions about your data? Use the contact form — we do not promise deletion by a specific date

SB 2610 may help limit exemplary damages for eligible businesses that maintain a documented cybersecurity program; not legal advice or a guarantee.

Questions about your results?

Use the contact form for product support or waitlists. For findings, unlock the Full Audit Report on audit.emailmenow.com or see pricing on /services.

Contact us

Meet our team · Privacy policy