Can someone send email pretending to be you? Find out free.
We'll check your domain's email protection (SPF, DKIM and DMARC) and email you a plain-English, one-page pass/fail result within 1 business day.
Free for the first 20 businesses each month.
Why it matters
If your domain's email settings are missing or incomplete, anyone can send messages that look like they came from you, such as fake invoices, payment-change requests or password links. Your customers can't tell the difference. Most small businesses have never had these settings checked, and the fix is usually quick.
What we check
- SPF: is there a list of the servers allowed to send email for your domain?
- DKIM: are your messages digitally signed so they can't be altered?
- DMARC: does your domain tell inboxes to reject fakes, and does it send you reports?
What you get
- A one-page result: pass, fail or needs attention for each check
- A short explanation of what each result means for your business
- The next steps to fix anything that failed
- Delivered by email within 1 business day
How it works
- Fill in the short form below.
- We check your domain's public email settings. We don't need a login or any access to your systems.
- You get your results by email.
Thanks! We'll email your results within 1 business day.
Who's behind this
GNA Global Services is run by Vito Russo, who has 20+ years of IT experience. Small businesses get straight answers from an experienced IT pro, not a sales script.
Want the full picture?
GNA IT Security Review, $149
A broader review of your email, accounts, devices and backups, with a prioritized fix list.
Get the $149 Security ReviewTax preparers
Federal law requires you to keep a Written Information Security Plan, and we write it for you in 3 business days for $249.
See the Done-For-You WISPFAQ
Is it really free?
Yes. There's no cost and no obligation. We limit it to 20 businesses a month so every result gets a personal review.
Do you need access to my email or systems?
No. These settings are public, so we only need your domain.
What if I fail?
You'll get the steps to fix it. If you'd like us to handle it or look further, the $149 Security Review is the next step.
I use Google Workspace or Microsoft 365. Am I covered automatically?
Not always. DMARC in particular is often missing, and that's the most common gap we find.
This check reviews your domain's public email authentication settings only. It is not a full security audit and does not guarantee protection against every phishing or spoofing attempt.