Free tool · No signup
What's blocking p=reject on this domain?
Type a domain. We read its public DNS and tell you its DMARC policy, SPF and DKIM, and what to fix before it can enforce.
We only read public DNS records. Nothing is stored.
What this can't see
DNS shows the policy, not the traffic. A domain can look ready here and still have a copier, a CRM or an invoicing tool sending as it that fails DMARC. You only find those senders in the aggregate (rua) reports, collected over a couple of weeks.
That's the part ReachReject does across every client domain. Send me 5–10 domains and I'll send back the full picture within 48 hours. It's free.
Get a free readiness checkGuides: Moving a domain from p=none to p=reject · DMARC across 50+ client domains