Use these free, no-obligation tools to check the health and security of your business IT. Start with the email domain security check below — we’ll be adding more free tools here soon.

Email Domain Security Checker (DMARC)

What is DMARC — in plain English

DMARC is a setting on your domain that stops criminals sending scam emails that look like they come from you. Set up correctly with SPF and DKIM, fake emails are blocked before they reach an inbox.

The catch: left half-finished or on “monitor only”, it quietly does nothing — which is why it’s worth a quick check.

60%
of cyber incidents ASD responded to involved phishing emails
15%
of Australian cybercrime reports were email fraud causing direct loss
~50%
of government domains still aren’t at DMARC’s strict “reject” level

Source: ASD Annual Cyber Threat Report 2024–25; Proofpoint (June 2025).

✓

Australia’s cyber authorities (ASD / ACSC) recommend enabling SPF, DKIM and DMARC — set to an enforced “reject” policy so fraudulent email is actually blocked, not just watched.

Why getting it right matters

Privacy Act 1988 Failing to take reasonable steps to protect personal data can mean penalties up to $50 million (or 30% of turnover) for serious breaches.
Data breach rules An email-driven breach can trigger mandatory notification and OAIC penalties under the Notifiable Data Breaches scheme.
Email fraud (BEC) Cybercrime now costs the average small business $56,600 per incident — and far more for larger firms.

Figures: ASD Annual Cyber Threat Report 2024–25 and the Privacy Act as amended (Dec 2024). General information only, not legal advice.

Enter your domain to see how well it is protected against email spoofing and phishing, and get recommendations to close any gaps.