SPF Surveyor: See your SPF Record Activity
The SPF Surveyor is a diagnostic tool that presents a graphical view of SPF records for a specific domain.
Using the SPF Surveyor allows you to do the following:
- Find out if your SPF record has been published correctly
- Identify which servers are authorized to send on behalf of the domain
- See how much traffic is coming from your domain’s SPF entries
- Prevent SPF record formatting mistakes that can cause email deliverability issues
- Discover any SPF record discrepancies
- Determine if your senders are sending SPF-authenticated email correctly
To access the SPF Surveyor via your dmarcian account in our DMARC Management Platform, follow these steps:
- Login, open the DMARC Manager menu and click Domain Overview
- Click on the SPF status under SPF Record (Lookups) domain you’d like to investigate and that has volume.
- In the popup, click SPF Surveyor—a new window will launch with SPF record details
- In the Record Analysis section, enable TMI
The reloaded view of the SPF record details integrates DMARC data to show you which of your SPF record entries are in active use for your domain and in what way.
This view can help you figure out which entries are in use and which ones are no longer needed. The more unused lookups and unnecessary top-level includes in an SPF record, the bigger an attack surface you could have, so it’s critical to keep your SPF records decluttered. The SPF Surveyor data can also help you keep your SPF records tidy to stay beneath the 10 DNS lookup limit.
This SPF feature provides reliable feedback on domains for which you have received DMARC data in the last seven days; in some cases, a seven-day period may not be sufficient to suggest that a particular IP range/include/etc. can be safely removed. If not entirely certain, check the last 30 days results for a clearer picture.
Don’t have an account with us just yet? No problem. You can take advantage of our SPF Surveyor as part of the suite of resources we provide at no cost or commitment for people deploying DMARC.
We’re Here to Help
With a team of email security experts and a mission of making email and the internet more trustworthy through domain security, dmarcian is here to help assess an organization’s domain catalog and implement and manage DMARC for the long haul.
Want to continue the conversation? Head over to the dmarcian Forum.
