SecLens.ONE

अनाम MCP सर्वर जो सार्वजनिक DNS से किसी डोमेन के SPF, DKIM, DMARC और DNSSEC की जाँच करता है और सुधार चरण लौटाता है।

होस्ट किया गया MCP सर्वर

npx add-mcp 'https://seclens.one/mcp'

Claude Code, Codex, Cursor और अन्य में इंस्टॉल होता है

दस्तावेज़

SecLens.ONE · Email security scores for public domains

Skip to content # 69.1% of mail-enabled domains in the Top 1M can be spoofed. SecLens.ONE checks SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DANE and DNSSEC for one domain, scores it from 0 to 100 and gives you the DNS records that close each gap. BIMI is shown on the report and is not scored. Domain Assess domain Keep this assessment private Public results are listed under "Last assessed domains". What we store Enter a domain such as example.com, without https:// or a path. Source: SecLens.ONE Top-1M study, October 2026 (measured 7 October 2026). n = 723,885 mail-enabled domains. Free. No account required. Published and enforced, October 2026 SPF published 89.5%
SPF enforced (-all) 33.9%
DMARC published 65.0%
DMARC enforced 30.8%

MTA-STS enforce 0.62%

               Grey bars are published. Blue bars are enforced. Source: [SecLens.ONE Top-1M study, October 2026](/research/2026-10-email-security-top1m/). n = 723,885 mail-enabled domains.

           Global Pulse

      [vs Top-1M study, Oct 2026](/research/2026-10-email-security-top1m/)

Average score

 Mean score of the domains in the Pulse.

             / 100

Adoption radar

 Seven protocols. Dashed: record published. Filled: configured to protect.

         Adoption radar

SPF … DMARC … DKIM … MTA-STS … DNSSEC … DANE … TLS-RPT … Published Effective ### Adoption by protocol Baseline: Top-1M study, Oct 2026 Published is present in DNS. Effective is configured to protect (for SPF: enforced, the record ends in -all ). The dashed marker is the Top-1M study: its effective share of mail-enabled domains, or its published share where the study reports no effective share (a different sample). Pulse (live) Top 1M study SPF … published · … enforced Top 1M 89.5% / 33.9% DMARC … published · … effective Top 1M 65.0% / 30.8% DKIM … published · … effective Top 1M 57.1% published MTA-STS … published · … effective Top 1M 1.36% / 0.62% DNSSEC … published · … effective Top 1M 6.9% published DANE … published · … effective Top 1M 4.81% / 1.26% TLS-RPT … published · … effective Top 1M 1.59% published ### Last assessed domains Most recent assessments, newest first. No domains assessed yet. /100
```
  [Assess a domain](#assess)

                15.1 %

               of mail-enabled domains enforce DMARC with p=reject

                0.62 %

               of mail-enabled domains enforce MTA-STS

               27.9

               mean score of mail-enabled domains, out of 100

       Source: [SecLens.ONE Top-1M study, October 2026](/research/2026-10-email-security-top1m/). n = 723,885 mail-enabled domains. [Read the study](/research/2026-10-email-security-top1m/).
```

How the score is calculated

                     Seven protocols, 100 points. BIMI is shown and not scored. Domains without mail are scored on a separate Null MX profile.

                        [Methodology](/methodology/)
                        [Source on GitHub](https://github.com/seclens-one/seclens)

                         Core protection · 60 pts

                          DMARC

SPF

                          MTA-STS

                         Plus transport & integrity · 40 pts

                          DKIM

                          DNSSEC

                          DANE

                          TLS-RPT

                         Excellent 90-100
                         Good 70-89
                         Fair 40-69
                         Poor under 40

Each gap comes with the record that fixes it

                 The remediation pack lists the DNS records and policy files for your domain, in the order that gains the most points.

                     Each failed check names the DNS record: the host, the type, and the value.

                     Policy files, including MTA-STS, are generated for the assessed domain.

                     DMARC moves in three steps: none, then quarantine, then reject.

                      TXT _dmarc.example.com  Step 1 of 3

                      v=DMARC1; p=none; rua=mailto:dmarc@example.com

                     File .well-known/mta-sts.txt

                      version: STSv1

mode: testing

Sources

             We do not invent testimonials.

Top-1M study, October 2026 1,000,000 domains measured on 7 October 2026 in one window of 1 hour 37 minutes.
Assessments on SecLens.ONE Domains assessed by visitors. The count is on the pulse above.
Scoring methodology Every check and weight is documented.
Source code on GitHub Assessment engine and scoring.

Assess a domain

Domain

 Assess domain

Keep this assessment private

Public results are listed under "Last assessed domains".
[What we store](/privacy/)

Enter a domain such as example.com, without https:// or a path.

    Mixed MX (RFC 7505 §3)  Mail profile  Null MX Profile  Hardened  Incomplete  MX hardening missing  Choose a path  PRIVATE

Result no longer available

No public assessment is currently available for this domain. This private assessment is no longer available in this browser session. Public assessment detail is available for 24 hours after a scan. Re-assess this domain to generate a fresh report.

Re-assess domain

Failed to load results

Re-assess domain

Could not load the report view.

This assessment was marked private. The result is shown only to you and was not saved to the public dashboard or history.

  No public assessments yet. Run one from  Assess domain .

Score

0 shown

Mixed MX Null MX MX missing Mail

             ←

            [Scoring](/methodology/)

              Re-assess

             &times;

     Assess domain

     Free public assessment. Same checks as the hero form.

   &times;

   Domain

     Keep this assessment private (not shown publicly)

    Public assessments are listed by default. See
    [what we store](/privacy/)
    for what is processed and how long it is kept.

    Assess domain

   Results open in the full assessment view when ready.

    That is the whole offer today: free public assessments, plus a private one via the checkbox.
    SecLens.ONE is funded by its operator, 42Sec PTE. LTD. There is no paid tier, no API product and no
    monitoring service. Questions about the service: the public
    [scoring methodology](/methodology/)
    and the [source code](https://github.com/seclens-one/seclens)
    cover how every verdict is produced.

Analyzing security posture…

Running 8 checks for .