Blog
Contact
Sign in
Scan complete
C
74/100
microsoft.com
Improved · +1
Compare
1 critical issue needs immediate attention.
10/10
checks
36
passed
finished
Scan timestamps
Created
Jul 7, 2026, 6:27 AM
Started
Jul 7, 2026, 6:27 AM
Finished
Jul 7, 2026, 6:27 AM
Updated
Jul 7, 2026, 6:27 AM
Export PDF
Re-scan
Findings by severity
39 results
1
Critical
0
High
1
Medium
1
Low
36
Pass
Report coverage
97%
14 skipped - these limit completeness.
14 skipped
All
53
Critical
1
Medium
1
Low
1
Pass
36
Skipped
14
Email
96%
Domain Alignment (DMARC)
Learn how it works
Info
6/7 pass
Domain Alignment (DMARC)
DMARC alignment is relaxed
The DMARC record allows relaxed identifier alignment for DKIM or SPF.
Low
Certificate Binding (DANE)
Learn how it works
Info
1/5 pass
Certificate Binding (DANE)
No MX host TLSA zone is protected by DNSSEC
None of the MX hosts have DNSSEC on their TLSA lookup zones. DANE SMTP cannot function without DNSSEC, as sending servers will ignore TLSA records from unsigned zones.
Critical
DNS
100%
DNS Integrity (DNSSEC)
Learn how it works
Info
0/6 pass
DNS Integrity (DNSSEC)
DNSSEC is not enabled
The parent zone does not publish a DS record for this domain.
Medium
Feedback
