Why does /audit return in ~3 seconds?

We read DNS and key email header fields only, use parallel resolvers with 2s timeouts, and return structured results with suggestions.

What is Proof‑of‑Scan?

We hash canonical JSON (sha256) and provide a Verify endpoint to recompute via multiple public DNS resolvers and compare hashes.

Do you store email bodies?

No. We never store bodies. We parse headers only, delete .eml right after parsing, and keep PDF/JSON for evidence.

Error examples: double SPF, truncated TXT, quoting issues

Audit now

Double SPF

"v=spf1 include:_spf.example.com -all"
"v=spf1 ip4:203.0.113.0/24 -all"

Publish a single SPF record; merge mechanisms; keep lookups ≤10.

Truncated TXT / quoting

Split long TXT into ≤255‑char chunks surrounded by quotes; avoid trailing spaces and stray quotes. Confirm your DNS provider doesn’t auto‑wrap without quoting.

Copy/paste hazards

Smart quotes from word processors
Invisible whitespace (non‑breaking spaces)
DNS providers that auto‑wrap lines without quoting

Validation checks

No duplicate TXT with v=spf1
Total lookups ≤10; depth ≤3
DMARC/Alignment show expected pass with the visible From