Tool / Email authentication
Inbox Pulse
Check MX, SPF, DMARC, MTA-STS, TLS-RPT, and BIMI records across up to 25 domains in one run.
Inbox Pulse reads public DNS only. It does not connect to mailboxes, read messages, inspect content, or confirm end-to-end deliverability.
- Free
- → No login
- Input
- → Up to 25 domains
- Output
- → Six DNS checks + grade
Input / Domain portfolio
Run an email-authentication check
Add one URL or domain per line. Inbox Pulse normalizes the list and queries current public DNS records.
- Capacity
- → 25 domains
- Mode
- → DNS-only
Public DNS records only · no mailbox access · no message or content scanning
Method / Scope
How to read the snapshot
Grades prioritize public DNS configuration. Ongoing CertPilot monitoring adds change history and evidence reporting.
How to read the grades
- AStrong foundation — MX, SPF, DMARC (enforced), and transport security in place.
- BGood foundation — DMARC is still in monitoring mode (p=none), or transport security missing.
- CSPF exists but DMARC is missing.
- DKey email-auth records are missing.
- FNo MX records or DNS lookup failed.
What this checks
- MX records — does this domain receive email?
- SPF — which servers are authorised to send?
- DMARC policy — p=none, quarantine, or reject?
- MTA-STS — encrypted mail transport policy
- TLS-RPT — transport-layer failure reporting
- BIMI — brand logo in supported email clients
What paid CertPilot adds
- Daily automated monitoring — no manual runs
- SSL certificate expiry tracking
- Domain registration expiry tracking
- DNS record change detection
- Client grouping across your agency
- Daily digest emails
- Branded PDF reports for clients