Email Security Assessment (SPF, DKIM, DMARC)

An email security assessment checks whether attackers can send convincing emails pretending to be your company, and how well your mail system protects staff from phishing. Misconfigured SPF, DKIM and DMARC records are among the most common and easily fixed weaknesses we find.

What We Check

• SPF, DKIM and DMARC records, alignment and enforcement policy.
• Domain spoofing and lookalike domain risks.
• Mail server and gateway configuration: TLS, MTA-STS and open relay checks.
• Microsoft 365 and Google Workspace email security settings.
• Phishing defences: filtering, attachment handling and user reporting.
• Third-party senders such as CRM and marketing platforms.

Our Approach

We analyse your DNS and mail configuration, run controlled spoofing tests where agreed, and review your email platform settings. We then guide you safely from monitoring to a fully enforced DMARC policy without disrupting legitimate email.

What You Get

• A clear report of email security gaps with risk ratings.
• Ready-to-publish DNS record recommendations.
• A step-by-step DMARC enforcement plan.
• Optional support through rollout and monitoring.

Why Offensium Vault

• Fast, high-impact improvements for a modest budget.
• Safe rollout that protects legitimate email delivery.
• ISO 27001 and ISO 9001 certified processes with strict confidentiality.

Combine it with phishing simulation to test both your technology and your people. Read our guide on staying safe from phishing scams.

Frequently Asked Questions

What are SPF, DKIM and DMARC?

They are email authentication standards. SPF lists who may send email for your domain, DKIM signs messages, and DMARC tells receiving servers what to do with emails that fail these checks.

Will changing DMARC stop our emails being delivered?

Not if it is done in stages. We start in monitoring mode, fix legitimate senders, then move to enforcement.

How long does the assessment take?

Most email security assessments are completed within a few days.

Get a Quote

Tell us about your environment and timelines and we will send a clear, fixed-scope proposal. Contact Offensium Vault or book a free call with our team.