Free scan 🦇
Can anyone send email pretending to be your domain?
Free scan
Test your app now
If your DMARC isn't published, they can, and finding out takes seconds. Paste your URL: ecoa reads your domain's SPF, DKIM and DMARC, plus the certificate, DNS and your home page headers. No signup.
- No signup to see the result
- Made by a dev, for devs
The backends we recognize and test
That is the technical analysis, which runs free once you create your account. The scan on this page is passive: security headers, TLS, DNS, email authentication and SEO.
SupabaseFirebaseClerkStripeVercelAppwriteHasuraPocketBaseAlgoliaNhostStytch