This section holds the interactive tool on the site. It is deliberately small: one assessment, built to be honest about what it does.
Email security assessment
The email security readiness assessment is a questionnaire about configuration that you can see for yourself in your admin consoles and DNS. It covers sign-in controls, SPF, DKIM and DMARC, mailbox abuse, filtering and people, and response and continuity. From your answers it produces a prioritised list: what to do first, what next, what can wait, with plain-language fixes and links to the guide that explains each.
It also includes a text explainer for SPF, DMARC and DKIM records. You paste the public record text and it points out syntax problems, such as a missing policy, a second SPF record, or an SPF record that counts more than ten DNS lookups.
What it does not do
It does not scan, query or look up anything. It cannot see your domain. It will not ask for a password, an MFA code, a token or any message content, and nothing you enter leaves your browser. Its output describes your answers; it is not a measurement, an audit, a certification or a statement that anything is protected or verified. DNS records and tenant settings must be checked with your own DNS tools and admin consoles.
For background first, start with the SPF, DKIM and DMARC guide or the resources index.