Checks the policy endpoint
Validates the fixed RFC 8461 HTTPS path, content type, syntax, mode, maximum age, and coverage of live MX hosts.
Free CLI · no account or API key
Find transport-security gaps across 25 email domains
Audit the public records that tie MTA-STS, TLS reporting, DMARC, MX coverage, SPF record count, and BIMI prerequisites together. The CLI returns stable issue codes and source-visible evidence—not a mystery score.
Download the free CLINode.js 22+ · MIT licensed · files are scanned before release · 25 domains per run
Separates transport from sender auth
Surfaces TLS-RPT and MTA-STS alongside DMARC enforcement, MX, and SPF record-count evidence without claiming inbox placement.
Built for portfolios
Accepts multiple public domains and produces structured JSON that an MSP or consultant can sort, compare, and archive.
What it can—and cannot—prove
- It is a point-in-time public configuration preflight. DNS and policy endpoints can change after the run.
- It checks RFC-visible relationships. It does not change DNS, read TLS aggregate reports, or test mailbox delivery.
- It deliberately skips guessed DKIM selectors. Selectors are not reliably discoverable, so the CLI does not turn guesses into a pass/fail claim.
- It is not a certification or guarantee. Review findings with the domain owner and mail provider before changing production records.
Optional fixed-scope report
Want the 25-domain findings checked and prioritized?
For $29, GoodAiDeas will run the same read-only checks for up to 25 public domains, verify the highest-impact findings against the visible source records, and deliver a CSV plus a concise repair-order memo within 48 hours after receiving an eligible domain list. One clarification round is included.
Buy the $29 portfolio reportSecure Stripe checkout. Domain names only—no passwords, DNS access, mailboxes, private reports, customer data, or regulated/safety-critical environments. This is a technical preflight, not remediation or certification.