DMARC Inspector

This tool analyzes a domain's DMARC configuration, SPF and DKIM alignment, and any available aggregate reports to confirm policy enforcement and pinpoint misconfigurations. It processes DNS records for _dmarc and related SPF/DKIM data, evaluates alignment with the envelope From domain, and yields a concise, actionable summary for your security or DNS team.
Conceptually, it retrieves the DMARC record, interprets policy (p=reject/quarantine/none) and subdomain policy, checks rua/ruf endpoints, and compares SPF/DKIM pass results to the From domain. It supports both root and subdomain policy analysis when requested and can incorporate provided aggregate data to show success rates by source or selector.
Who benefits: security engineers, DNS administrators, IT security teams, and domain owners seeking a rigorous, standards-based view of email authentication readiness. Unique value lies in compliant interpretation (RFC 7489), remediation guidance, and the ability to export structured results for SOC or SIEM workflows. Core features include DMARC retrieval, policy extraction, alignment evaluation, report handling, and actionable remediation suggestions; use cases cover onboarding, security audits, and post-change validation.
Outputs are designed for integration and human review: a clear status, policy details, alignment results, and recommended fixes, with optional support for exporting aggregate report summaries.