AstraVerify

AstraVerify checks a domain two ways and gives you the exact record, file or tag to publish for each finding.

Email Security (score out of 100) covers MX, SPF including permanent errors and a soft ~all, DKIM across about 80 common selectors, and the DMARC policy, alignment and reporting addresses. DKIM selectors cannot be listed from DNS, so for providers that use random selectors, such as Amazon SES or Postmark, you can send AstraVerify one email and it reads the selector straight from the signature.

Discoverability (score out of 100) covers robots.txt, the sitemap, canonical host and redirects, page metadata, structured data and llms.txt, and it fetches the page as Googlebot, Bingbot, GPTBot, ClaudeBot, PerplexityBot and OAI-SearchBot. That last part catches a common and invisible problem: a CDN or firewall returning 403 to an AI crawler while robots.txt and the origin both say the page is allowed.

Every recommendation comes with the record to paste and a button that re-checks that one item, so you can fix and verify without rescanning everything. Scans are free and need no account. Weekly monitoring, which rescans a domain, analyses DMARC aggregate reports and emails you when something changes, is paid per domain, as is having the fixes done for you. AstraVerify is also an MCP server, so an AI assistant can run the same checks inside a chat.