Skip to content
Start with 100 free verification credits
Qualisend

Domain health monitoring

Know the day a record breaks.

An SPF record that crosses the 10-lookup limit, a DKIM key your provider rotated, a DMARC policy still on p=none. Nobody tells you; your mail just starts landing in spam. We check MX, SPF, DKIM, DMARC, MTA-STS and BIMI on every domain you monitor, every day, and email you when something breaks - and again when it's fixed.

  • 6 record types, checked daily
  • First check in under a minute
  • Fix guidance for every issue
  • From $8.99/mo

The email that explains itself

Every issue comes with what it means for your deliverability and what to change in DNS - in plain words, not an RFC reference. When the next daily check finds it fixed, you get the all-clear.

  • Both directions. An email when an issue appears, and again when it clears - after the next check confirms it.
  • A grade you can glance at. Healthy, Needs attention or At risk per domain, with every issue listed under it.
  • No false alarms. If DNS doesn't answer, the check is marked undetermined and we try again on the next run - nothing is reported broken on a timeout.

Set up in under a minute.

Add a domain, and that's it. Nothing to install, no DNS change needed to start - DKIM selectors are auto-detected, or you can set your own.

01

Add a domain

Type it in. The first check of all six record types runs within a minute, and the grade appears on your dashboard.

Try the one-off check first
02

We re-check every day

MX, SPF with its lookup count, your DKIM selectors, the DMARC policy, MTA-STS and BIMI - every 24 hours per domain, or on demand with Re-check.

SPF, DKIM and DMARC, explained
03

You hear about changes

An email names the domain, the record and the fix when an issue appears - and when it clears. On Multiple and Many, the last 30 days of changes stay on the page.

How to set up DMARC

Every record that decides the inbox.

The six DNS records a mailbox provider reads before it accepts your message, with the details that actually fail in practice.

MX

Your mail servers exist and resolve. A domain with no MX, or an MX host with no address behind it, looks suspicious when it sends.

SPF

One record, valid syntax, every include resolving, and the DNS lookup count against the limit of 10 - the error most SPF setups drift into.

DKIM

Your selectors have keys, at 2048 bits, out of testing mode. Set the selectors you sign with, or let us try the common ones.

DMARC

A policy that's enforced (not p=none), a report address, and pct= not below 100 - flagged when it isn't, with the next step named.

MTA-STS

Whether your domain publishes a TLS policy for inbound mail - optional, but a signal of a well-run domain.

BIMI

Whether a BIMI record is published - the logo-in-inbox standard that needs an enforced DMARC policy first.

Starts at $8.99/mo.

Domain health monitoring is an add-on to any Qualisend account - the free tier included. Pick the pack that matches how many domains you send from.

Single

Watch one domain.

$8.99/mo

1 domain

Start monitoring
Best value

Multiple

Up to 10 domains.

$89/mo

10 domains

Start monitoring

Many

Up to 60 domains.

$499/mo

60 domains

Start monitoring

Every pack: daily checks of all six record types, alerts both ways, fix guidance, re-check on demand. Cancel anytime.

Pair it with blacklist monitoring and DMARC reports.

Three monitoring add-ons for the same domains, each its own monthly subscription on any plan. Switch each one on per domain from the Monitoring section of your dashboard.

From $7.99/mo

Blacklist Monitoring

Your domains and mail IPs checked every 24 hours against 40+ DNS blacklists, with an email when a listing appears and again when it clears.

See blacklist monitoring
From $13.99/mo

DMARC Reports

Add a Qualisend address to the rua= tag of your DMARC record and we collect the aggregate reports: pass rates, sending sources and failures per domain.

See DMARC reports

Related reading

Guides that go deeper on the problems this page watches for.

Email domain health monitoring: what to check and when

What email domain health covers, which DNS records break silently, when a one-off check is enough and what to alert on when you monitor daily.

SPF, DKIM or DMARC stopped working? How to find the cause

Authentication that used to pass now fails? Check DNS migrations, duplicate SPF records, removed DKIM keys and new senders, then catch the next break.

SPF too many DNS lookups: how to count and fix permerror

SPF allows 10 DNS lookups. Learn which terms count, how to diagnose a permerror and the order to fix it: remove, subdomain, ip4, then flatten.

How to find your DKIM selector (and rotate the key safely)

Find your DKIM selector from the s= tag in a message header, check key length, and rotate keys without a gap in signing, with the DNS lookup to confirm.

Related free tools

One-off checks and record builders. No account needed.

Domain health checkSPF, DKIM, DMARC, MX, BIMI, and MTA-STS in one live report.SPF record generatorAssemble a valid SPF TXT record from your sending sources.DMARC record generatorBuild a DMARC policy record, from p=none monitoring to enforcement.MTA-STS & TLS-RPT generatorGenerate the records and policy to enforce TLS on inbound mail.BIMI record generatorBuild a BIMI record to show your brand logo in supporting inboxes.SPF setup guidesStep by step, by provider

Domain health monitoring FAQ

Six record types per domain: MX (servers exist and resolve), SPF (a single valid record, every include resolving, the DNS lookup count against the limit of 10, the all qualifier), DKIM (your selectors have keys, their length, the testing flag), DMARC (policy, report address, pct), MTA-STS and BIMI (published or not). Each problem is a named issue with a severity and a fix.

Every 24 hours per domain, with the first check within a minute of adding a monitor. You can also re-check on demand from the domain's page after changing DNS.

When a check finds an issue that wasn't there before, and again when the issue clears - an issue is marked fixed after the second consecutive clean check, so a flaky DNS answer never produces a false all-clear. If DNS doesn't respond at all, the check is marked undetermined and nothing is alerted.

Enter the selectors your sending services sign with (for example google, k1, selector1) and we check exactly those. Leave the field empty and we try the most common selectors; the result shows which were found and marks them auto-detected.

No. Domain health monitoring, blacklist monitoring and DMARC reports are three separate add-on subscriptions. They share the same list of monitored domains, so you switch each product on per domain from the Monitoring section of your dashboard, and you can run any one of them on its own.

The free tool runs the same checks once, when you ask. The add-on runs them every day on the domains you monitor, emails you when something breaks or is fixed, and on Multiple and Many keeps the last 30 days of changes.

Any plan, the free tier included. It's a monthly add-on priced by how many domains you watch: 1 for $8.99, up to 10 for $89, up to 60 for $499. Cancel anytime.

Just need a one-off check?

The free domain health check runs the same checks once, with no account. Monitoring is the version that watches the domain for you every day afterwards.

Run the free domain health check

Stop finding out from the spam folder.

From $8.99/mo. Six record types checked daily, alerts in both directions, your first check within a minute of adding a domain. Cancel anytime.

Add your first domain