mAIb Deliverability Repair

Find out why your business email may be getting rejected or sent to spam.

Scan SPF, DKIM, DMARC and your mail configuration in seconds. Get the exact repair steps if something is wrong.

Free scan. No signup. No password. Nothing is published about your domain unless you ask for it.

Find

A real SPF evaluator that follows your include chain and counts the DNS lookups the way a receiving server does. A DMARC parser built on RFC 9989, including the DNS Tree Walk that replaced the public suffix list. Provider-aware DKIM discovery.

Explain

Every finding says what is published, why it matters, and which rule and which published standard it comes from. Where the evidence cannot settle a question, the answer is not determined, not a guess dressed up as a failure.

Repair

The paid pack is an implementation artifact: the records to publish, the order to publish them in, the instructions for your DNS host and mail platform, and the previous values written down so any change can be undone.

Don't just find the problem. Repair the configuration.

There is no shortage of tools that will show you a red cross next to DMARC. The gap is what comes next: the specific record, for your domain, with your senders, that you can publish this afternoon.

Free

£0

  • Full domain scan and health score
  • SPF, DMARC, DKIM and MX analysis
  • Provider detection and requirement readiness
  • Browser-side message header analyser
  • Rescan any time
Run a scan

Repair Pack

£19 one-time

  • Exact DNS records, with rollback values
  • Priority-ordered, mail-safe sequence
  • DNS host and mail provider instructions
  • Rescan verification, before and after
  • PDF and JSON export, 30 days of access
Scan first — buy only if something is wrong

Guard

£7 per month

  • Daily automated authentication scan
  • Configuration change and regression detection
  • DNS and score history
  • Provider requirement re-checks
  • Cancel any time through Stripe
About Guard

What this tool will not tell you

A domain scan reads public DNS. That is genuinely a lot — it is where SPF, DKIM keys, DMARC policy and mail routing live — but it has hard limits, and a tool that pretends otherwise is worse than useless because you will act on what it says.

  • It cannot tell you that DKIM is missing. A selector is chosen by whoever sends your mail and appears only inside a signature, so not finding one means no evidence either way.
  • It cannot tell you which IP addresses your mail actually leaves from. MX records say where mail arrives.
  • It cannot see your spam-complaint rate, your unsubscribe headers, or whether a delivery used TLS.
  • It cannot promise that fixing your records will put your mail in the inbox. Nothing can.

Paste the headers of one message you have sent and most of those unknowns become answerable. Analyse a message — it is parsed in your browser and never uploaded.

Ruleset 2026.09.14, sources last verified 2026-09-14. Read the methodology.