Clear mail assessment without false alarms
DomainPulse separates mail availability from optional security controls. A scan only reads public DNS, SMTP, and TLS signals.
Core Mail Health
100/100 means DomainPulse found no confirmed problem in the required DNS, MX, SMTP, and basic TLS checks for the observed profile. It does not mean the domain is perfect or fully protected.
Optional protection
Missing MTA-STS, TLS-RPT, DANE, DNSSEC, CAA, or BIMI does not reduce Core Mail Health. It is shown as Not configured and a recommendation. A configured mechanism that is broken is a real finding.
Authentication and spoofing protection
SPF authorizes systems for the SMTP-envelope domain and alone does not protect visible From. DKIM without a known selector is UNKNOWN, not a failure. DMARC p=none is valid monitoring configuration; it is separately weak spoofing protection and does not lower Core Health.
Severity and limits
CRITICAL and WARNING are confirmed problems; RECOMMENDATION is an improvement; NOT CONFIGURED is an absent optional control; UNKNOWN means insufficient evidence. A public scan cannot confirm message-level results, complaints, unsubscribe behavior, volume, or list hygiene. Gmail, Yahoo, and Outlook readiness therefore reports observable configuration only, never compliance.
History
Every scan stores its methodology version. Historical scores are not silently recalculated, and a methodology update does not create a monitoring incident.