What is an email security analyzer?
An email security analyzer inspects public DNS records that control whether receiving mail servers trust messages claiming to come from your domain. Vigilbase checks SPF, DKIM, DMARC, MX, DNSSEC, MTA-STS, and TLS-RPT, then returns an A-F grade with remediation guidance.
Agents can run the same non-intrusive scan via POST /api/v1/agent/tools/email-security/execute.
Email security analyzer FAQ
What does the Vigilbase Email Security Analyzer check?
It inspects public DNS email authentication records for a domain, including SPF, DKIM, DMARC, MX, DNSSEC, MTA-STS, and TLS-RPT, then returns an A-F grade with remediation guidance.This is a public DNS configuration check, not a mailbox audit or a test of every message you send. Review each finding against the actual mail providers and sending services in use.About email authenticationCompare the public security checks
Is the Email Security Analyzer free?
Yes. The public tool is free to use for checking a domain's email authentication posture. No Vigilbase account is required to run a scan.The analysis reads public DNS information. Optional emailed reports and intrusive website tools have their own access and verification requirements.Compare the public security checksTool access and verification requirements
Why do SPF, DKIM, and DMARC matter?
Together they help receiving mail servers verify that messages claiming to come from your domain are authorized. Misconfigured or missing records make spoofing and phishing easier and can hurt deliverability.Inventory all legitimate senders before tightening policy. Check authentication alignment and reporting with your mail administrator so a protective change does not reject legitimate mail.About email authenticationRun a check through the public API
Can agents run this scan autonomously?
Yes. Agents can POST {"target":"example.com"} to https://vigilbase.com/api/v1/agent/tools/email-security/execute without Turnstile (optional developer API key from https://one.vigilbase.com/developers). See https://vigilbase.com/developers. The browser UI remains available for interactive use.The API inspects public records and does not modify DNS or access mailbox content. Follow the documented request format and rate limits when automating checks.Run a check through the public APIAPI authentication and rate limits
Can I use the report to fix my mail setup?
Yes. The report highlights failing or weak controls and recommends concrete DNS changes for mail administrators. Review each recommendation against your mail provider’s configuration before applying it.Identify the owner of each DNS record and the affected sending service. Apply changes through the appropriate provider, allow for DNS propagation, then rerun the check and review mail authentication results.About email authenticationDiscuss your scope with Vigilbase
