Can someone send email pretending to be you?
Type your company's web address. In a few seconds you'll know who handles your email, whether a stranger can send messages as you, and whether your real messages can be proven yours. Read from public records, in plain words. Nothing is stored.
Why this matters
Email has no built-in way of proving who sent a message. Anyone can put your name and address on the "from" line. Three public records on your domain fix that: one lists who is allowed to send as you, one puts a signature on each message, and one tells other mail servers what to do when a message fails those tests. Most small businesses have none of them set properly, because nobody asked.
The everyday cost is your real mail landing in junk, because receiving servers can't tell it from a fake. The bad-day cost is someone emailing your bookkeeper as you, asking for a payment to go to a new account. That works far more often than it should, and the first record above is what stops it.
The fix is small. A few DNS records, done in the right order over two or three weeks so nothing genuine gets blocked along the way. It's one of the first things I do in anyone's Microsoft 365, and it's on the Systems page under Security.
What this check is and isn't
It reads the same public records any mail server reads, and explains them. It doesn't sign in to anything, doesn't touch your account, and doesn't keep what it finds. It can miss a signing key kept under an unusual name, and it can't see settings inside your mail system, only what your domain announces to the world. For that, the conversation is free too. justin@cronkcompanies.com