Resources
Guides and research on email authentication, SPF, DKIM, DMARC, and DNSSEC. Practical how-tos, plus data on who can actually be spoofed.
ReportThe State of Email Security 2026We scanned 218 of the best-known domains across six industries. Nearly 1 in 4 can be spoofed today, and the worst offenders aren't who you'd guess.Read →GuideSPF, DKIM, and DMARC ExplainedThe complete plain-English explainer: what each record does, how they work together to stop spoofing, and how to set them up.Read →GuideGoogle, Yahoo, and Microsoft Sender RequirementsWhat Gmail, Yahoo, and Outlook now require from senders, the full checklist, and how to comply before your mail starts bouncing.Read →GuideHow to Set Up DMARC Without Breaking Your EmailThe safe path from no protection to full DMARC enforcement, one step at a time, with zero risk to your real mail.Read →GuideHow to Set Up DKIM (Step by Step)Enable DKIM in Google Workspace, Microsoft 365, and your email tools, publish the record, and confirm it aligns with your domain.Read →GuideSPF Record Not Working? Common Causes and FixesThe handful of mistakes that break SPF, from two records and too many DNS lookups to alignment, with the fix for each.Read →GuideWhy Are My Emails Going to Spam?The real reasons mail lands in spam, starting with authentication, plus a practical fix order you can work through today.Read →GuideHow to Read Your DMARC ReportsThe daily XML reports tell you exactly who is sending as your domain. How to read them and turn them into fixes.Read →GuideWhat Is DNSSEC (and Should You Enable It)?DNSSEC signs your DNS records so they can't be forged in transit. What it protects, who needs it, and how to turn it on.Read →GuideWhat Is MTA-STS?MTA-STS forces encrypted delivery to your mail servers and blocks downgrade attacks. How it works and how to set it up.Read →