Protect campaign spend, invoices, and customer email
Find email problems before they cost you revenue.
A campaign can look sent while messages land in spam. An invoice, password reset, or sales follow-up can disappear without an obvious error. HealthCheck Email watches the authentication, reputation, DNS, encryption, and sending-source signals behind delivery — then tells you what changed and what to fix next.
1 monitored domain free forever · No card required · 7-day trial on paid plans
Customer stories
Teams that live on email trust it here
We send thousands of outreach emails for customers every week, and deliverability is the whole business. HealthCheck Email caught a sending service that silently stopped signing DKIM before it burned a single campaign — and the treatment plan walked us from p=none to reject without losing legitimate mail. Reply rates went up because more mail simply arrived.
Every client site we launch comes with email, and we used to find out about problems when the client forwarded a bounce. Now each domain has a grade, and I get a Slack alert the moment a DNS record changes. Last month it flagged a broken SPF include the same day a client's registrar migrated — fixed before anyone noticed. That alone pays for it.
Why it matters
A delivery problem is a revenue problem.
Email infrastructure failures rarely announce themselves. They show up later as wasted spend, missed payments, lost leads, support tickets, or damaged trust.
Marketing campaigns
Stop paying to send into spam
Check authentication, sender reputation, complaints, and a real seed message before a campaign problem burns through budget and audience attention.
Revenue-critical email
Keep invoices and customer email arriving
Catch DNS changes, broken signing, alignment failures, and transport-encryption problems before receipts, resets, proposals, and follow-ups disappear.
Brand protection
Block spoofing without blocking yourself
Identify every legitimate sender, triage unknown traffic, and simulate stricter DMARC enforcement against real reports before publishing a stronger policy.
How it works
Know what broke, what it affects, and what to fix next.
HealthCheck Email turns authentication records and provider reports into a simple operating loop your team can actually use.
Add the domains that matter
Start with one domain free, paste a portfolio, or import domains during onboarding. Each domain gets its own history and controls.
Establish a live health baseline
See one grade across SPF, DKIM, DMARC, MX, BIMI, MTA-STS, DNSSEC, TLS reporting, and provider compliance.
Understand real sending traffic
Identify known and unknown senders, compare pass rates by provider, inspect alignment, subdomains, geography, reputation, and message volume.
Fix it before the next send
Follow generated records and a safe enforcement plan, then get notified by email, Slack, or webhook when health changes again.
Everything included
Everything between send and inbox, in one dashboard
From DNS records to provider reputation and real campaign messages, see the signals that explain whether your email is trusted, protected, and ready to send.
Continuous health grade and audit trail
Track SPF, DKIM, DMARC, MX, BIMI, MTA-STS, DNSSEC, and TLS reporting over time. See exactly which record changed and when your grade moved.
DMARC traffic and source intelligence
See volume, SPF and DKIM alignment, policy disposition, provider pass rates, subdomain coverage, geography, and DKIM selector inventory from real reports.
Known senders and spoofing triage
Label legitimate platforms, isolate unknown senders, and distinguish a forgotten business tool from traffic pretending to be your domain.
Safe enforcement simulation
Model a stricter DMARC policy against the last 30 days of legitimate traffic. See which senders would bounce and follow a staged path from monitoring to reject.
Sender reputation and complaint signals
Connect Google Postmaster Tools to monitor domain and IP reputation, user-reported spam, authentication success, encrypted traffic, and delivery errors.
Campaign and inbox testing
Send a real message to your private seed address and inspect authentication, alignment, headers, content checks, unsubscribe compliance, and the resulting grade.
Email, Slack, and webhook alerts
Choose the incidents your team cares about—from record changes and grade drops to new spoofing signals—and route them to the channel that gets action.
Guided fixes and transport security
Get copy-ready records and provider-aware guidance for authentication, BIMI, MTA-STS, DNSSEC, and TLS reporting, with every DNS change recorded.
Share, collaborate, and automate
Invite teammates, publish a shareable domain health page, use the read-only API, or let an AI agent inspect monitoring through the MCP server.
For agencies & freelancers
Protect every client domain without living in ten dashboards
Give your team one place to onboard domains, investigate delivery risk, coordinate fixes, and prove that monitoring is active.
- Bulk-add client domains and keep every grade, sender, incident, and DNS history separated
- Invite teammates and route alerts to email, Slack, or your own webhook workflows
- Share a public health status page without exposing the private monitoring dashboard
- Use the API and MCP server to bring email-health data into internal tools and agent workflows
Agency covers 120 domains; MCP covers 1,000. Every paid plan starts with a 7-day free trial.
Pricing
Start free. Upgrade when you outgrow it.
Every plan includes the daily checkup, DMARC Analytics, bulk import, a public health page, and essential email alerts. Paid tiers unlock longer history, enforcement guidance, reputation, campaign testing, automation, and collaboration.
$3/mo
$48$40 billed yearly
7-day free trial · Cancel anytime
- 2 domains monitored
- Enforcement guidance & infrastructure monitoring
- Infrastructure monitoring & 90-day history
- 3 email alerts per domain
- Bulk import & public health pages
$16/mo
$228$190 billed yearly
7-day free trial · Cancel anytime
- 20 domains monitored
- DMARC Analytics, infrastructure & 1-year history
- Enforcement readiness & reputation monitoring
- Campaign testing, Slack & webhook alerts
- API & MCP access
$66/mo
$948$790 billed yearly
7-day free trial · Cancel anytime
- 120 domains monitored
- 5 team members & 2-year history
- 5 active API keys
- Everything in Pro
$333/mo
$4,788$3,990 billed yearly
7-day free trial · Cancel anytime
- 1,000 domains monitored
- 25 team members & 20 active API keys
- Portfolio-scale monitoring & alert routing
- Priority support
- Everything in Agency
$0/mo
Free forever · No card required
- 1 domain monitored
- Daily checkup, grading & essential fixes
- DMARC Analytics & 30-day history
- 1 email alert destination
- Bulk import & public health page
The fine print, in plain English
- What's unlimited on every plan: free health checks, bulk-import attempts, and public health-page views. No caps, no fine-print asterisks beyond stopping abuse.
- What's limited: monitored domains, history, team seats, API keys, and alert destinations according to your plan. If you reach it, paid integrations and automation pause after a downgrade, but we keep their configuration and history so they resume when you upgrade again.
- Our promise: the limits your plan has today will never be reduced. Any future change can only be an increase.
FAQ
The questions that matter
Do I need to be technical to use this?+
No. The whole point is that you shouldn't have to be. Every result is explained in plain English — what's wrong, why it matters, and the exact record to publish, with copy buttons. If you do want the raw technical detail, it's there too, just not required.
Is the free plan really free?+
Yes — one domain, daily grading, essential fixes, DMARC Analytics, 30-day history, one email alert destination, bulk import, and a public health page, forever with no card. Paid plans add longer history, enforcement guidance, reputation, campaign testing, automation, and team features.
What does monitoring actually do every day?+
We re-check SPF, DKIM, DMARC, MX, BIMI, MTA-STS, DNSSEC, and TLS reporting; recompute your grade; log DNS changes; and process the authentication reports mailbox providers send about your domain. Alerts can go to email, Slack, or a webhook.
How is this different from running a free scanner once?+
A scanner gives you one snapshot and a page of jargon. The snapshot is the easy part — email breaks later, silently: a DNS change, an expired key, a new tool someone connected. Monitoring is the difference between 'quietly getting worse for months' and 'caught it the same day.'
I manage domains for clients — is this for me?+
Yes. Agency covers 120 domains and MCP covers 1,000. You can bulk-add domains, invite teammates, keep per-domain history and alerts, share public health pages, and connect internal tools through the API or MCP server.
Can HealthCheck Email guarantee inbox placement?+
No tool can guarantee an inbox placement because mailbox providers make the final decision using content, engagement, reputation, and recipient-specific signals. HealthCheck Email monitors the authentication, DNS, transport, reputation, complaint, and message-level problems you can measure and fix before they become a larger delivery issue.
Can I cancel anytime? What happens to my data?+
Cancel in one click, effective at the end of your billing period. Your report history stays exportable, and everything we check is based on open email standards — nothing about your setup is locked to us. Your free domain keeps working either way.
What actually happens if I just ignore all this?+
Nothing dramatic overnight, which is exactly the problem — email quietly starts landing in spam, deliverability drifts down, and eventually someone can send fake email that looks like it came from you. Gmail and Yahoo now reject unauthenticated mail outright. The fix costs a few DNS records; the drift costs customers.