Check your charity's public email, domain and website signals.
Enter your ABN or ACNC-listed organisation name and get a plain-English snapshot built for charity and not-for-profit leaders.
A quick public check before a deeper conversation.
This free check looks for public signals around email spoofing (SPF, DMARC, DKIM), DNS/domain control, website HTTPS and certificate health, reverse DNS, and public spam blocklists. If a recent scan exists, it reuses it. If it is stale, the system refreshes the public website, DNS and email security checks where possible.
It is designed as a leader-friendly starting point, similar in spirit to a simple MXToolbox-style lookup, but written around the questions charities and not-for-profits usually need to answer: who owns the domain, can fake email be reduced, is the website behaving, is the certificate healthy, and what should we check next?
Start the free checkRunning a business rather than a charity? Use the free business cyber security check instead — same check, business name and domain instead of ABN/ACNC search.
Want the fuller picture first? Read our charity and NFP cyber security checklist.
What you can receive
- Immediate public-signal result page.
- Optional emailed report link you can share internally.
- Optional follow-up from Suburban Secure.
- Plain-English next steps aligned with ACSC charity guidance.
This is not a penetration test or vulnerability assessment. It uses public records and public DNS/website signals only.
Based on official charity cyber security basics.
The Australian Cyber Security Centre's charity checklist encourages practical controls such as MFA, updates, backups, password managers, scam awareness training, access reviews, reputable cloud services and incident response planning.
Official checklist
Read the ACSC cyber security checklist for charities and not-for-profits
Result flagged SPF, DKIM or DMARC issues?
That's the exact gap our monitored DMARC service closes — moving your domain from technically-present records to actively enforced protection against spoofing.
Now in preview
We're also building a dedicated version of this check.
Can They Email As Me? is a standalone Suburban Secure tool doing the same plain-English SPF/DKIM/DMARC check, with a simpler no-signup flow and, soon, ongoing monitoring and change alerts. It's still early — the ABN/ACNC-aware check above remains the primary way to run a charity scan today.
Try Can They Email As Me?