Free tools
Every Wiredepth tool, free.
35 on-demand tools across web posture, email authentication, DNS, threat intelligence, and compliance. No signup, unlimited use. Search to find one, or browse by category below.
Popular tools
Web posture
TLS / SSL check
Cert chain, expiry, protocols, HSTS
Web posture
Subdomain takeover
Dangling CNAME + 20+ service fingerprints
Email authentication
DMARC + SPF checker
Policy, alignment, recommendations
Email authentication
SPF flattener
Resolve includes to 0-lookup record
Email authentication
DKIM checker
Look up + validate published record
Email authentication
Can my domain be spoofed?
Yes / maybe / no verdict on third-party impersonation
DNS & domain
DNS health
DNSSEC, CAA, registration, mail blocklists
Compliance & audit
Full domain check
6 tools in one shareable report
Browse by category
Web posture
5Is your website secure? (TLS, headers, subdomains)
Email authentication
15Will your email reach the inbox? (DMARC, SPF, DKIM)
DNS & domain
9Is your DNS set up right? (DNSSEC, CAA, vendor inventory)
Threat intel
1Investigate something suspicious (reputation, threat feeds)
Compliance & audit
5Evidence for the audit (workpapers, crosswalks, scorecards)
All 35 tools
DMARC + SPF checker
Policy, alignment, recommendations
DMARC wizard
AI-personalized migration plan
DMARC report viewer
Paste RUA XML, get a clean PDF
SPF record generator
Generator15+ presets, real-time lookup counter
SPF raw validator
Paste-and-validate syntax + count
SPF flattener
Resolve includes to 0-lookup record
DKIM checker
Look up + validate published record
DKIM TXT generator
GeneratorFormat TXT around your public key
BIMI checker
Verify published BIMI + VMC
MTA-STS + TLS-RPT checker
Transport encryption policy
MTA-STS generator
GeneratorDNS record + policy file
TLS-RPT generator
GeneratorTLS reporting record builder
IPv6 deliverability
AAAA + reverse-DNS posture (the gap most checkers miss)
Can my domain be spoofed?
Yes / maybe / no verdict on third-party impersonation
Which big brands can be spoofed?
Live index across 110+ high-profile domains
DNS health
DNSSEC, CAA, registration, mail blocklists
DNSSEC validator
Secure / Insecure / Bogus, with DS + DNSKEY inspection
CAA checker
Which CAs can issue certs for your domain
CAA record generator
GeneratorPick CAs from a preset list, get BIND records
Reverse DNS bulk lookup
PTR records for up to 50 IPs at once
Vendor scoring
Batch grade your suppliers
Vendor consolidation audit
Per-vendor blast radius for one domain
Vendor de-authorization guides
Step-by-step DNS edits to remove SendGrid, Mailgun, Mailchimp, HubSpot, and more
Infrastructure map
Visual graph of NS / MX / SPF / DKIM dependencies
Generate evidence pack
Tick frameworks, get a binder-ready ZIP. Prove subscribers.
Full domain check
6 tools in one shareable report
Compliance crosswalks
OSFI B-13, PCI DSS 4.0, HIPAA, SOC 2, NIS2, DORA, NYDFS, SEC
Email-auth scorecard (PDF)
Timestamped 1-page snapshot for your attestation pack
Audit workpaper templates
5 binder-ready PDFs with live evidence pre-populated
Free companion
Run the checks automatically, in every inbox
The Wiredepth extension adds inline DMARC / domain-age / threat-intel pills to every message you read in Gmail and Outlook, plus one-click Scam Check on any suspicious email. Same checks as the tools above, run continuously instead of on demand. Free.
Install the extension →