tools/email-security-grade

One domain in. One grade out.

MX, SPF, DKIM and DMARC checked together and graded as a single score — the same checks our assessments run first. Lookups go straight from your browser to Cloudflare's public DNS resolver (1.1.1.1); nothing is sent to us or stored.

email-grade --domain

// enter the bare domain (no https://, no email address) · optional: add a DKIM selector after a space, e.g. contoso.com selector1

This graded the domain's defences. The free 5-question snapshot checks the tenant behind it → ./run snapshot