Email gateway & DMARC lookup
for every account on your list.
Microsoft 365 or Google Workspace, which gateway sits in front of the mailbox, and whether DMARC is enforced. DNSai reads it from public DNS. Check one domain here, or profile your whole territory or client list in Domain Manager.
Domain Manager: 100 domains at no cost · no card required · results in minutes
The answers every email-security conversation starts with
Before a vendor lets a company route mail through it, the company has to publish records in DNS. Those records are public, so the mail setup of any organization can be read without asking.
Mail platform
Microsoft 365, Google Workspace or another provider, read from the domain’s mail records.
Email gateway
The secure email gateway in front of the mailbox, such as Proofpoint, Mimecast or Barracuda, matched against 279 gateway signatures.
DMARC policy
none, quarantine or reject: whether the domain can still be spoofed. SPF and DKIM are read alongside it.
Everything else in DNS
Security, identity, e-signature and SaaS vendors that ask customers to publish a verification record.
Three companies, three different mail setups
The same three accounts shown on the Domain Manager landing page. Open any of them for the full profile.
| Company | Mail platform / gateway (MX) | DMARC | Authentication |
|---|---|---|---|
| NVIDIA | Microsoft 365 | reject | SPF, DKIM, BIMI |
| Delta Air Lines | Proofpoint | reject | SPF, DKIM |
| Netflix | Google Workspace | reject | SPF |
Values are copied from the Domain Manager landing page. Records change; the profile pages read live DNS.
From a territory or client list to a sorted view in minutes
- 1
Import the list
Add your territory, target accounts or client domains to Domain Manager with folders and tags. The first 100 domains cost nothing; Pro covers up to 50,000.
- 2
Read and export
Every domain comes back with its mail provider, gateway and authentication posture. Search the list, then export it to CSV.
- 3
Watch for changes
Domain Manager alerts you when a record changes, so a new mail provider or a tightened DMARC policy shows up on that account.
What sellers and service providers ask of a list
Which accounts have no third-party gateway?
Microsoft 365 or Google Workspace with mail delivered straight to the platform.
Which still publish DMARC at p=none?
Domains that monitor but do not yet block spoofed mail.
Which run the gateway you compete or integrate with?
Proofpoint, Mimecast, Barracuda and the rest, by account.
Which client domains changed their mail records?
Change alerts on every monitored domain, for MSPs that look after many tenants.
Security platforms DNSai sees most often
Select a vendor to see what it is and how many domains publish its records.
Counts are distinct domains carrying the platform’s records: a floor that grows every day. Refreshed monthly.
A watchlist in the cloud, bulk scans on the desktop
Domain Manager (cloud)
Keep your account or client list in one place, with profiles, change alerts and CSV export. Enterprise adds team seats, the REST API and the MCP connector for Claude.
DNS Explorer (desktop)
A Windows 11 and macOS app for large one-off scans: up to 1,000,000 domains per scan, DKIM selector discovery, and CSV and PDF reports.
Straight answers
How do you know which email gateway a company uses?
From the company’s public DNS. A secure email gateway is placed in front of the mailbox through the domain’s mail records, and DNSai matches those records against 279 gateway signatures. The same records show whether mail lands in Microsoft 365, Google Workspace or another platform.
Where does the data come from?
Public DNS only. No logins, no crawling behind authentication, and no names or contact lists of people.
Is a record proof of a paying customer?
No. It proves the domain published the vendor’s record, which is what turns the product on. It does not show seats, spend or whether the contract is live.
Can I check domains I don’t own?
Yes. DNS is public, so you can look up prospects, customers, partners and client domains as well as your own.
What does it cost to profile an account list?
Domain Manager profiles up to 100 domains at no cost and without a card. Larger lists, team seats, and API and MCP access are on paid plans listed on the pricing page.
Put your account list next to its mail setup.
Add the domains you sell to or look after and get a profile of each in minutes.