How we check
We read the domain's public DNS records using DNS-over-HTTPS (Cloudflare, with Google as a back-up). Only the domain name is looked up. Nothing is stored and no personal data is sent. The checks follow the NCSC's email security and anti-spoofing guidance. These settings aren't part of the Cyber Essentials question set, but they protect your clients and suppliers from email fraud in your name. DKIM keys can use any name, so we can only check the common ones.
Guidance only. Please read before using this tool. Our tools are free, general guidance to help you prepare. They are not an assessment, a pre-check, or advice on your organisation, and a result here does not mean you will pass Cyber Essentials. The tools help you check parts of your setup, but they don’t do everything for you: they can’t put policies, processes and procedures in place, or show how your controls meet each requirement. The NCSC requirements and IASME’s marking guidance change frequently, and our tools are not updated in line with every change, so they may be incomplete, out of date or wrong. Your organisation is responsible for its own answers, for its controls, and for checking them against the current requirements. Only the assessor who marks your submission decides whether it passes. As far as the law allows, Get Cyber Certified accepts no liability for any loss, failed assessment or other outcome arising from using these tools. By using this tool you agree to our free tools terms.