Check your business's public email, domain and website signals.
Enter your business name and domain (ABN optional) and get a plain-English snapshot of what a scammer could already fake about you.
A quick public check before a deeper conversation.
This free check looks for public signals around email spoofing (SPF, DMARC, DKIM), DNS/domain control, website HTTPS and certificate health, reverse DNS, and public spam blocklists. If a recent scan exists for your domain, it reuses it. If it is stale, the system refreshes the public website, DNS and email security checks where possible.
It is designed as an owner-friendly starting point, similar in spirit to a simple MXToolbox-style lookup, but written around the questions a business actually needs answered: who owns the domain, can fake email be reduced, is the website behaving, is the certificate healthy, and what should we check next?
Start the free checkRunning a charity or not-for-profit instead? Use the free charity cyber security check — same check, ABN/ACNC search built in.
What you can receive
- Immediate public-signal result page.
- Optional emailed report link you can share internally.
- Optional follow-up from Suburban Secure.
- Plain-English next steps aligned with ACSC small business guidance.
This is not a penetration test or vulnerability assessment. It uses public records and public DNS/website signals only.
Based on official small business cyber security basics.
The Australian Signals Directorate's small business guidance starts with three practical measures: turn on multi-factor authentication, keep software updated, and back up important data and test that it restores. This free check adds a fourth: knowing what your own domain and email are quietly telling the world.
Official guidance
Result flagged SPF, DKIM or DMARC issues?
That's the exact gap our monitored DMARC service closes — moving your domain from technically-present records to actively enforced protection against spoofing.
Now in preview
We're also building a dedicated version of this check.
Can They Email As Me? is a standalone Suburban Secure tool doing the same plain-English SPF/DKIM/DMARC check, with a simpler no-signup flow and, soon, ongoing monitoring and change alerts. It's still early — the business check above remains the primary way to run a scan today.
Try Can They Email As Me?