# Free domain health check

https://dnsautopilot.com/check scores any domain from 0 to 100 on its email authentication, mail servers, transport security, DNS, and registration. No sign-up is needed, and each problem comes with the exact record to publish.

## What it checks

- Email authentication (35% of the score): the DMARC record, its policy, report addresses and their authorization, subdomain policy; the SPF record, its DNS lookups, and how it ends; DKIM on 16 common selectors; BIMI.
- Mail servers (20%): MX records, reverse DNS of the mail server, and 8 blocklists.
- Mail in transit (15%): STARTTLS by mail provider, MTA-STS, TLS-RPT, and DANE.
- DNS security (15%): DNSSEC, nameservers, CAA, and SOA.
- Domain and web (15%): registration expiry and age, transfer lock, the HTTPS certificate, and IPv6.

## How the score works

Each check passes, warns, or fails. Each area gets a score from 0 to 100, and the overall score weights the areas 35, 20, 15, 15, and 15 percent. The fix plan ranks fixes by the points each adds and shows the score you would reach with all of them applied. Scores of 90 to 100 are good, 50 to 89 need work, and 0 to 49 are poor.

## From an AI assistant or a script

Fetch https://dnsautopilot.com/check/{domain}.md, for example https://dnsautopilot.com/check/example.com.md. It returns the same report as plain Markdown: the score, every check that failed or warned, and the exact record to publish for each fix. It needs no sign-up or API key and shares the limit of 20 checks an hour per client.

## Sources and limits

The check reads public DNS, the domain's HTTPS certificate, its MTA-STS policy file, the registry's RDAP record, and Google Public DNS over HTTPS (for DNSSEC). Results are cached in memory for ten minutes, and each visitor can run 20 checks an hour.

## What it cannot tell you

Which of your senders fail DMARC, or whether someone is sending mail as your domain. That needs your aggregate reports; https://dnsautopilot.com/docs/setup shows how to give them to DNS Autopilot. A free account also re-checks a domain every day and keeps its score history.

## Plans

- Free ($0): 1 domain, 30 days of history, Gmail connect once Google verifies the app
- Pro ($19 a month): 10 domains, 13 months of history, 3 Gmail mailboxes, synced hourly
- Agency ($49 a month): 100 domains, 25 months of history, 10 Gmail mailboxes, synced hourly