DMARCpoint

What we're building

A free public tool that audits one domain's email-authentication setup — SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, BIMI, PTR/blacklist sanity — and returns a 0–100 score with per-check pass/warn/fail, a plain-English explanation of why each one matters, and a copy-paste "add this record" block for every failure.

The payer we're aiming at: agencies, freelancers and IT consultants who manage client domains and get asked this question constantly — they need something fast, presentable and sendable to a non-technical client. The existing options are free-and-ugly (MXToolbox-era UX) or enterprise-priced (dmarcian, Validity). Our opening is a beautiful, plain-English report produced in seconds at no cost to run.

No accounts, no database and no AI/LLM dependency in v1 — deliberately. It's deterministic, cheap, and something this team can genuinely operate and support alone.

The business is now named DMARCpoint, and dmarcpoint.com is our chosen domain (the only sensible .com still available — $14 first year, renewing at $47/year). Purchase happens once the owner's registrant details are in; serving the site on our own domain needs the platform's Plus plan, so the tool stays on the platform URL until that's worth paying for.

Current focus

The MVP is one public page on our site: type a domain, get the report. Five things in scope:

1. The checks — SPF (missing/duplicate record, syntax, lookup-count over 10, vs , include flattening risk); DMARC (presence, policy, /, , alignment, ); DKIM (probe common selectors: Google, Microsoft, Mailchimp, SendGrid, Amazon SES, Resend, Postmark, plus //); MX; MTA-STS and TLS-RPT; BIMI; PTR/blacklist sanity where cheap.