Advanced Email Security Audit
Comprehensive email authentication including BIMI and MTA-STS
Go beyond basic SPF/DKIM/DMARC checks with advanced email security features. Validate BIMI brand indicators, verify MTA-STS enforcement, and ensure mail server health across your entire domain portfolio.
The Challenge
Basic email authentication is necessary but not sufficient for enterprise email security. Advanced features like BIMI for brand verification, MTA-STS for transport security, and comprehensive mail server health monitoring require specialized tools and expertise.
The Solution
Use EdgeDNS to perform comprehensive email security audits covering all authentication mechanisms (SPF, DKIM, DMARC, BIMI, MTA-STS), mail server health, and configuration best practices. Get unified scoring and actionable recommendations.
Endpoints Used
Combine these EdgeDNS endpoints to build this solution.
/v1/security/bimiTry in PlaygroundBIMI Check: Validate BIMI logo and VMC certificate
/v1/security/mta-stsTry in PlaygroundMTA-STS Check: Verify MTA-STS policy and enforcement
/v1/dns/mx-healthTry in PlaygroundMX Health: Check mail server connectivity and redundancy
/v1/security/spfTry in PlaygroundSPF Check: Validate SPF record and lookup count
/v1/security/dmarcTry in PlaygroundDMARC Check: Verify DMARC policy enforcement level
/v1/score/emailTry in PlaygroundEmail Score: Get comprehensive email security grade
Results You Can Achieve
Brand protection with BIMI
Validate BIMI setup to display verified logos in email clients
Transport security with MTA-STS
Ensure TLS enforcement for email in transit
Comprehensive health monitoring
Track mail server availability and redundancy
Code Example
Comprehensive email security audit
async function advancedEmailAudit(domain) {
const headers = { 'Authorization': 'Bearer YOUR_API_KEY' };
const [spf, dkim, dmarc, bimi, mtasts, mxHealth, score] = await Promise.all([
fetch(`https://api.edgedns.dev/v1/security/spf?domain=${domain}`, { headers }),
fetch(`https://api.edgedns.dev/v1/security/dkim?domain=${domain}`, { headers }),
fetch(`https://api.edgedns.dev/v1/security/dmarc?domain=${domain}`, { headers }),
fetch(`https://api.edgedns.dev/v1/security/bimi?domain=${domain}`, { headers }),
fetch(`https://api.edgedns.dev/v1/security/mta-sts?domain=${domain}`, { headers }),
fetch(`https://api.edgedns.dev/v1/dns/mx-health?domain=${domain}`, { headers }),
fetch(`https://api.edgedns.dev/v1/score/email?domain=${domain}`, { headers }),
].map(p => p.then(r => r.json())));
return {
domain,
overallGrade: score.data.grade,
authentication: {
spf: spf.data.has_spf,
dkim: dkim.data.valid_keys > 0,
dmarc: dmarc.data.policy,
bimi: bimi.data.has_bimi,
mtaSts: mtasts.data.enforced
},
mailHealth: mxHealth.data.overall_health,
recommendations: score.data.recommendations
};
}Learn More
Explore industry standards and best practices related to this use case.
Ready to build Advanced Email Security Audit?
Get started with 200 free API requests per month. No credit card required.