Email Trust Status

Email Authentication Check and Governance Record for Your Domain

See where your domain stands on email impersonation protection

Email Trust Status shows whether your domain’s published email policies are set to help block unauthorised use of your domain in email.

It assesses publicly visible email authentication records, including DMARC, and presents the findings in a clear, point-in-time Cyber Governance Record.

Use it to identify gaps, prioritise follow-up with your IT provider and share evidence with boards, insurers, brokers and compliance teams.

Get Your Email Trust Status

  • Board-ready Cyber Governance Record in PDF format
  • Clear explanations of results and suggested next steps
  • Generate in minutes
  • Only your domain name needed. No system access required.
  • One-time purchase with no subscription
R200.00 incl. VAT
Get my Governance Record

How is your email domain protected against spoofing?
Get a clear record you can review and share.

Why this is important

Email remains one of the most common channels for fraud, phishing, and business email compromise.

Criminals can fake an organisation’s email domain, the part after the @, to send messages that appear legitimate. This is called domain spoofing.

DMARC tells receiving email systems how to handle messages that use your domain but fail email identity checks:

  • No DMARC policy: No DMARC instructions are provided.
  • Monitoring only: Allows reporting without asking for messages to be blocked.
  • Quarantine: Asks for messages to be treated as suspicious, typically sent to spam.
  • Reject: Asks for messages to be blocked.

A working email service, or simply having DMARC in place, does not mean your domain is set to block spoofed emails.

This Cyber Governance Record clearly documents your domain’s email enforcement level for internal oversight, insurer review, or compliance records.

What is assessed

The record reviews publicly visible DNS-based email authentication indicators for your domain.

  • DMARC policy state (reject, quarantine, none, or not present)
  • Sender Policy Framework (SPF) record
  • DomainKeys Identified Mail (DKIM) selector presence
  • DMARC subdomain policy
  • Mail Exchange (MX) record

The record provides a point-in-time view of the domain’s externally visible email authentication configuration.

What is not assessed

  • Internal email security systems
  • Security monitoring or incident response capabilities
  • Phishing simulation or email delivery testing
  • Security audit or certification
  • Continuous monitoring