IDENETY MSP Managed IT Services Logo San Antonio TXIDENETY MSP

Zone Intelligence: IDENETY's Domain Security Scanner

What Zone Intelligence Checks

SPF Record
Grade: Pass / Fail

Validates your Sender Policy Framework record to prevent email spoofing and phishing attacks sent from your domain.

RFC 7208 · DMARC Alignment
DKIM Signing
Grade: Pass / Fail

Checks for DomainKeys Identified Mail signing, which cryptographically authenticates outbound email and reduces spoofing risk.

RFC 6376 · DMARC Alignment
DMARC Policy
Grade: None / Quarantine / Reject

Evaluates your DMARC policy enforcement level. A 'reject' policy provides the strongest protection against domain abuse.

RFC 7489 · Email Authentication
MX Records
Grade: Present / Missing

Confirms mail exchange records are properly configured so inbound email reaches your organization reliably.

RFC 5321 · DNS
HTTPS / TLS
Grade: Secure / Insecure

Verifies your domain serves traffic over HTTPS with a valid TLS certificate, protecting data in transit.

TLS 1.2+ · HSTS
BIMI Record
Grade: Present / Missing

Checks for Brand Indicators for Message Identification, which displays your logo in supported email clients and signals strong email authentication.

BIMI Group · Brand Trust

DNS AnalyzerA
Email AuthenticationF
SSL/TLS HealthA
Security HeadersC
Admin ExposureB
AI VisibilityD
Overall GradeC

Explore Zone Intelligence

Methodology

How Zone Intelligence scores domains — the checks, weights, and grading rubric explained.

Sample Report

See a full Zone Intelligence report with findings, risk scores, and remediation guidance.

Threat Intelligence Reports

Quarterly domain security trends across the San Antonio business landscape.

FAQ

Common questions about domain security scanning, scoring, and what to do with your results.

Zone Intelligence — Frequently Asked Questions

What is Zone Intelligence?
Zone Intelligence is IDENETY MSP's proprietary domain security scanner. It checks your domain's DNS configuration, email authentication records (SPF, DKIM, DMARC, BIMI), HTTPS/TLS status, and other security signals, then produces a letter grade (A–F) and a 0–100 security score with actionable findings.
Is the scan free?
Yes. The basic scan — including your security grade, overall score, and a summary of findings — is completely free with no account required. Detailed remediation steps and the full technical report are available for a one-time fee of $197.
What does Zone Intelligence check?
Zone Intelligence checks SPF, DKIM, DMARC, and BIMI email authentication records; MX record configuration; HTTPS/TLS certificate validity; DNS health; and additional signals that indicate domain security posture. Each check is weighted and contributes to the overall score.
How is the security grade calculated?
The score is calculated on a 0–100 scale based on the presence, validity, and enforcement level of each security control. A score of 90–100 earns an A grade; 80–89 a B; 70–79 a C; 60–69 a D; below 60 an F. DMARC enforcement level (none vs. quarantine vs. reject) has the highest weight.
Do I need to be an IDENETY MSP customer to use Zone Intelligence?
No. Zone Intelligence is available to any business at no cost for the basic grade and score. IDENETY MSP managed customers receive Zone Intelligence monitoring as part of their plan, with proactive alerts when your domain security posture changes.
What should I do if my domain gets a low score?
Start with the highest-weighted findings — typically DMARC enforcement and SPF alignment. The $197 detailed report includes step-by-step remediation instructions for your specific DNS provider. IDENETY MSP also offers a one-time email authentication remediation engagement for businesses that want hands-on help.