Email deliverability tools

30 free checks, generators, tests and utilities for the domains and inboxes you send cold email from. Paste a domain and Ken grades its SPF, DKIM, DMARC, MX and eight more checks first. No signup, and nothing is sent from your domain.

Enter
Opens the Domain health check, then every check and generator it links to keeps your domain.
Check
9 tools
DNS and reputation
Generate
4 tools
Records to paste
Test
5 tools
A real message or report
Set up
4 tools
Fleet size and new domains
Utilities
8 tools
IP, ASN, SSL and more

Check

9 tools. One domain in, a verdict and the record to paste out. Nothing is sent.

Generate

4 tools. Build the SPF, DMARC and DKIM records your domain needs, or flatten an SPF record that runs past 10 lookups.

Test

5 tools. Send a test email, paste headers or drop a DMARC report. Ken reads the result.

Set up

4 tools. Size the fleet and set it up right before the first send.

Utilities

8 tools. Small network tools. Fast, with no result to email.
Ken runs these checks on every inbox it sends from.
Connect your domains and Ken watches DNS, blacklists and bounce rates daily, and pauses an inbox before it does damage.
Start free - 1,000 credits, no card

What the deliverability suite covers

Cold email lands or it does not, and most of what decides that is set before the first send: DNS records, the reputation of the domain and its IPs, and how many messages each inbox sends per day. These tools cover that whole path. They are the same checks Ken runs on every connected inbox, opened up for any domain.

Check a domain

The domain health check runs SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, BIMI and reverse DNS in one lookup, flags a domain that also carries your website and team mail, and grades the result A to F. Each single-check page goes deeper on one record: the SPF checker draws the include tree and counts the 10 DNS lookups, the DKIM checker sweeps the common selectors, the DMARC checker walks the policy ladder from none to reject. Every warning comes with the exact record to paste.

Test a real message

DNS can be right and mail can still go to spam. The mail tester gives you an address to send one real email to and scores what arrives out of 10. The header analyzer reads the hops and authentication results from a message you already have. The DMARC report analyzer turns the XML reports nobody opens into a list of who sends as you.

Set up the fleet

The inbox calculator turns a monthly volume into inboxes, domains and a cost, the warmup calculator into a day-by-day ramp. The sending domain generator finds sibling domains that are free, so cold email never runs on the domain your customers write to.

Questions

Where should I start?
Run the domain health check on your sending domain. It grades SPF, DKIM, DMARC, MX and eight more checks, and links to the single-check tool for anything that needs a fix.
Do these tools send anything from my domain?
No. The checks read public DNS and the mail servers a domain points to. Nothing is stored beyond a 10-minute cache unless you email yourself the report.
Can I run them on a prospect's domain?
Yes. Everything here reads public records, so a prospect's domain works the same as yours. Agencies use the health check as a first-call opener and email the report to the prospect from the form under the result.
Can I keep a result?
Yes. The form under a check's result emails you the full report with the records to paste, and a saved link that stays live for 90 days. The DKIM key generator saves nothing, because a private key should never leave your device.
Is there an API?
Yes. The checks are also a free JSON API, documented at /tools/api. Most calls need no key, and a free Ken API key raises the limits.

Other suites

67 free tools in 6 suites.