Is your domain ready for inboxes and AI discovery?

Two scores out of 100 in seconds: whether inboxes trust your email, and whether search engines and AI assistants can find, read and quote your site.

Free · no sign-up · results in seconds

What AstraVerify is

AstraVerify is a free Domain Trust checker for domain owners, IT admins and agencies. Enter a domain and it reads the public DNS records that decide whether mail from that domain is trusted (MX, SPF, DKIM, DMARC) and the public web surface that decides whether the site can be found and cited (robots.txt, sitemap, redirects, page metadata, structured data, llms.txt and whether Googlebot, Bingbot, GPTBot, ClaudeBot and PerplexityBot actually receive the page). You get an Email Security score, a Discoverability score, and optimization recommendations with the exact record, file or tag to paste for each one.

What it checks

Email Security score 100 points

  • MX records25

    Confirms the domain can receive email and identifies the mail provider (Google Workspace, Microsoft 365, and others).

  • SPF25

    Verifies a valid v=spf1 record, the servers it authorises, and whether it ends in -all (reject) or ~all (soft fail).

  • DKIM20

    Finds published signing keys across common selectors and checks key strength; a live email can confirm the selector in use.

  • DMARC30

    Checks the policy (none, quarantine, reject), alignment mode and reporting addresses, which together decide whether spoofed mail is blocked.

Discoverability score 100 points

  • Crawl access25

    robots.txt is readable and does not block search, answer-engine or AI-training crawlers, and the edge (CDN, firewall) actually serves the page to Googlebot, Bingbot, OAI-SearchBot, PerplexityBot, ClaudeBot and GPTBot.

  • Site plumbing20

    Valid HTTPS, http and www redirecting permanently to one canonical host, no noindex on the root page, a valid sitemap declared with an absolute URL, lastmod dates and real 404s.

  • Page metadata20

    Title and description at search-result length, exactly one H1, an absolute canonical link, Open Graph and Twitter tags, and a 1200×630 preview image that loads.

  • Structured data20

    JSON-LD that parses and names the Organization, the WebSite and the type of thing the site offers, with BreadcrumbList on inner pages.

  • Answer-engine readiness15

    An llms.txt file, an opening paragraph that defines the brand, question-form headings with direct answers, enough real text, and a declared language.

How it works

  1. 1Enter a domain

    Type a domain you own or work with. No account needed.

  2. 2Get two scores in seconds

    MX, SPF and DMARC results appear immediately and DKIM selectors follow; the discoverability scan fetches robots.txt, the sitemap, the root page and a few inner pages at the same time.

  3. 3Fix what matters

    Each recommendation explains the risk and gives the exact DNS record, file or HTML tag to publish, then a Verify button re-checks just that item.

Results come straight from public DNS and HTTP in a few seconds. No sign-up, nothing to install. You can confirm the DKIM selector your mail service actually uses by sending one email, and you can see your site exactly as a named crawler sees it.

Need it done, or watched?

Fix packages

We make the exact changes a scan recommends, for one domain, verified by rescan. A quote is free.

Monitoring

Weekly rescans of both scores, history, and an alert within a day of any change to DNS records, robots.txt, redirects, certificates or crawler access. 14-day free trial, then billed monthly per domain; cancel any time.

Both are offered on a domain's result page.

Frequently asked questions

What is SPF?

SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are allowed to send email for your domain. Receivers check the sending server against it. A record ending in -all tells receivers to reject anything else; ~all only marks it as suspicious.

What is DKIM?

DKIM (DomainKeys Identified Mail) adds a digital signature to each outgoing message using a private key. The matching public key is published in DNS under a selector, such as google._domainkey.example.com. Receivers use it to verify the message was not altered and really came from your domain.

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS record that tells receivers what to do when a message fails SPF and DKIM alignment: nothing (p=none), send it to spam (p=quarantine) or reject it (p=reject). It also lets you receive reports about who is sending mail as your domain.

Why does my domain score less than 100?

Points are awarded per record: MX 25, SPF 25, DKIM 20 and DMARC 30. Missing records score zero, and weak settings such as SPF ~all, DMARC p=none or a 1024-bit DKIM key cost points. The recommendations list shows exactly which change would raise the score.

Why can DKIM not always be found from DNS alone?

DKIM keys live under a selector name that is not listed anywhere in DNS. AstraVerify checks around 80 common selectors used by Google, Microsoft, and popular email services. Providers such as Amazon SES or Postmark use random selectors, so the tool also lets you send one email from your domain to read the real selector and confirm that outgoing mail is signed.

What does the Discoverability score measure?

Whether search engines and AI answer engines can crawl, read and quote the site: robots.txt rules and real crawler access at the edge (25 points), site plumbing such as HTTPS, one canonical host, sitemap and 404 handling (20), page metadata (20), structured data (20) and answer-engine readiness including llms.txt and a definitional first paragraph (15). It reads the root page and up to four pages from the sitemap; it does not measure keywords, rankings or backlinks.

Why does blocking AI crawlers lower the score?

A site that GPTBot, ClaudeBot, PerplexityBot or OAI-SearchBot cannot read is not quoted in ChatGPT, Claude or Perplexity answers and is not described from its own words in future models. Blocking them is a legitimate choice, and the score simply reflects the consequence: blocking search crawlers is critical, blocking answer-engine crawlers is important, blocking training-only crawlers is a recommendation.

Does AstraVerify crawl my site?

Only when someone enters your domain and presses Scan: about 14 to 18 requests for robots.txt, the sitemap, the root page, up to four inner pages, llms.txt, the preview image and one deliberately missing URL, finished in a few seconds and cached for 15 minutes. Opening a result link never triggers a fetch. The bot identifies itself as AstraVerifyBot and honours a Disallow rule for that name.

Is AstraVerify free?

Yes. Both scans, the scores, the recommendations and the emailed report are free, with no sign-up. Two things are paid: having the fixes done for you (fixed-price packages per domain) and monitoring, which rescans a domain weekly, keeps the history and emails you when something changes (14-day free trial, then monthly per domain).

Can you fix it for me?

Yes. Under the recommendations, choose Request a fix. A request is free and answered within one business day; a paid package covers the listed items for one domain, done directly with access you grant or as exact instructions to whoever manages your DNS and site, and verified by rescan.

Guides