ZeroSpams

Email security audit and report

Most businesses have never checked how their email is set up. An audit shows, in an afternoon, whether your domain can be forged, why emails go to spam, and which settings leave you exposed.

Updated · 2 min read · By the ZeroSpams team

The short answer

An email security audit checks your domain’s authentication (SPF, DKIM, DMARC), its reputation and blacklist status, and your email service’s security settings, then explains the results in plain words with a prioritised list of fixes. You receive a written report you can act on yourself or hand to us.

What’s included

  • Authentication: SPF, DKIM and DMARC for every domain you own, including alignment for each sending service.
  • Reputation: blacklist checks for your domain and sending IP addresses.
  • DNS: MX, reverse DNS and related records for your email.
  • Accounts: two-step sign-in, admin accounts, forwarding rules, old accounts.
  • Settings: filtering, external-sender warnings, sharing and app access.
  • A written report: a score for each area, what each finding means, and the fixes in order of priority.

How we do it

  1. Agree the scope: which domains and which email service.
  2. Run the checks, from DNS lookups and test emails to settings reviews.
  3. Write the report, with plain explanations.
  4. Walk you through it in a short call.
  5. Fix it, if you want us to, at a fixed price.

What the report looks like

One page of summary (red, amber or green for each area), then a page per finding: what we found, why it matters, and exactly how to fix it. It’s written for business owners, with the technical details in an appendix for whoever makes the changes.

Common questions

How long does an audit take?

For a small business with one domain, usually a few days from access to report.

Do you need access to our systems?

The domain checks need no access. For the account and settings review, we need admin access to your email service, or we can guide you through it on a call.

Is the audit free?

We offer a free quick check of your domain’s authentication and blacklist status. The full audit, including accounts and settings, is a fixed-price service.