Skip to main content

Email Security Scorecard

Enter your domain. We'll check DMARC, SPF, DKIM, and MX configuration and tell you whether attackers can spoof your domain today.

Built for cannabis operators that rely on vendor email, POS notifications, payroll, compliance systems, and payment workflows.
Useful before cyber insurance renewals, vendor-risk reviews, and phishing-awareness conversations with finance teams.
Loading scorecard form.

Email authentication basics.

What does the Email Security Scorecard check?

It checks DMARC, SPF, DKIM, MX, and domain spoofing signals for a business domain. Gaps in these same records are what let attackers impersonate a trusted sender — see how in our breakdown of the DKIM replay threat.

Is the scorecard free?

Yes. CannaShield provides the scorecard as a free initial check for business domains.

What should I do if my domain fails these checks?

A failing DMARC, SPF, or DKIM record leaves your domain open to spoofing and vendor-invoice fraud. The BEC/Phishing Defense Sprint closes those gaps — email authentication, identity, and payment-verification controls in one scoped engagement.