Record presence
Whether a DMARC record is available for the checked domain.
Free email security tool
Free DMARC Checker
Check whether your domain publishes a DMARC record and identify whether the policy is set to none, quarantine or reject.
CloudSpex explains what the current policy means, why it matters and what should be changed next.
What is DMARC?
DMARC is a DNS-based email policy that tells receiving servers what to do when a message fails DMARC checks. It helps domain owners publish a clear policy, but it does not guarantee that every unwanted message will be stopped.
What does the CloudSpex DMARC checker test?
Policy
Whether the available policy is none, quarantine or reject.
Record interpretation
Whether the current record can be interpreted by the existing DMARC evaluation.
CloudSpex currently checks whether a DMARC record is present, whether its policy is none, quarantine or reject, and whether the record can be interpreted. It does not currently analyze alignment, reporting destinations, inheritance or aggregate reports.
What do p=none, p=quarantine and p=reject mean?
p=none
Messages are monitored, but failing messages are not instructed to be quarantined or rejected.
p=quarantine
Receiving servers are asked to treat failing messages as suspicious.
p=reject
Receiving servers are asked to reject messages that fail DMARC.
Why p=none is not full enforcement
p=none is a useful monitoring stage, but it does not ask receivers to quarantine or reject failing messages. Review legitimate sending sources before moving to an enforcing policy.
DMARC check vs email security check
DMARC Checker
Focuses on the DMARC record, its policy and whether it can be interpreted.
Email Security Check
Reviews SPF, DKIM and DMARC together as part of a broader email security summary.
DMARC check vs continuous monitoring
One-time check
Shows the currently available DMARC policy state.
Continuous monitoring
Helps detect when monitored email-security configuration changes unexpectedly.
Frequently asked questions
What is a DMARC record?
A DMARC record is a public DNS policy for a domain’s email. It tells receiving servers how to handle messages that fail DMARC checks.
What does the CloudSpex DMARC checker test?
CloudSpex checks whether a DMARC record is present, whether its policy is none, quarantine or reject, and whether the record can be interpreted.
What does p=none mean?
p=none means messages are monitored, but failing messages are not instructed to be quarantined or rejected.
What is the difference between p=quarantine and p=reject?
p=quarantine asks receiving servers to treat failing messages as suspicious. p=reject asks them to reject failing messages.
What happens if a domain has no DMARC record?
Without a DMARC record, receiving servers have no DMARC policy from the domain to apply. Create and validate a record before checking again.
Is p=none enough to protect a domain?
p=none is useful for monitoring, but it is not full enforcement. Review legitimate mail sources before moving to quarantine or reject.
Is this DMARC check free?
Yes. This is a limited, read-only public check using the protected CloudSpex Free Scan flow.
Does the checker make changes to DNS?
No. CloudSpex reads public DNS information only and does not change DNS, email settings or website configuration.
DMARC policies can change or disappear without warning.
Add your domain to CloudSpex to monitor DMARC, SPF, DKIM and related email-security configuration changes.
Start Monitoring Free Check Another Domain