DMARC missing or not enforced
Reads _dmarc and checks that the policy is quarantine or reject.
Recommended next step if found
Publish _dmarc TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain" and move to p=reject after reviewing reports.
DMARC
DMARC publishes alignment and handling policies for domain-based email authentication. A policy observation is not proof that all messages are protected.
Related public checks
The following checks provide related public observations. Their presence does not mean this entire topic has been tested or that the application is secure.
Keep the scope.
A blocked or unfinished check remains unverified. Review technical recommendations with the person operating the website and test changes before applying them to a live service.
Read the full methodology