Domain Health Check
Check how any domain is set up for email and web security. See what is solid, and what is worth tightening.
DKIM keys sit at a selector name your mail provider chooses, so we can only guess the common ones. If you know yours, enter it and we will check it exactly.
Runs a live check in a few seconds. We do not keep a history of the domains checked.
How this check works
The check reads information that is already public: your DNS records, your certificate, and the headers your website sends back. It never signs in to anything, never changes anything, and never sees anything private.
To do that, the domain you type is sent to the services that hold the answers - Google's public DNS resolver (for the DNSSEC check), IANA, and the registry responsible for your domain (for the registration check). Some of these are outside the UK. Nothing else about you is sent with it.
We do not keep a history of the domains people check. A result is held for about twenty minutes so that repeating a check is instant, and then it clears itself. Your IP address is held in a short-lived counter, for about an hour, purely to stop the tool being abused. We do not use it for anything else and there is no tracking or advertising in this tool.
The check only ever reads public records, so it is fine to run on any domain. We simply ask that you use it as intended - to understand how a domain is set up - rather than scripting it at volume against domains you have no connection to.
This is general information about a domain's public configuration, not advice specific to your organisation, and it is not a full security audit. Bee Support is not affiliated with, endorsed by, or acting on behalf of Microsoft, Google, Cloudflare, or any registrar or registry named in a result. Guidance last reviewed July 2026.