Scan a client's domain and fix email security

Before you start

• Who can do this: Anyone who can see the page
• Plan: DMARC Monitoring (included in every plan). Domain Attack-Surface Scanner (included in every plan). See pricing.
• Where to start: open DMARC Setup in your console.

Steps

1. Click Add Domain. From the dashboard, with the client's company selected

   Scan a domain from the outside, the way an attacker would see it, and get a clear list of website, email and DNS issues to fix.

   Open Domain Scan Results in your console →

2. Scan the domain. Type example.com and click Scan

   From the article: How to scan a domain

   1. Select the company the domain belongs to.
   2. Type the domain in Scan a domain (for example example.com). Web addresses are trimmed to the domain automatically.
   3. Leave Include admin services (SSH, RDP) on to also check for exposed administrative services.
   4. Turn on Scan exact hostname / subdomain to scan, for example, a staging site exactly as typed instead of the main domain.
   5. Click Scan and watch the progress bar. Sections fill in as results arrive.

   Open Domain Scan Results in your console →

3. Review the issues. Summary, business risks, then Technical Details

   From the article: How to review an existing domain

   1. Click the domain in Your monitored domains. Use Filter domains… when you have many.
   2. Read the summary and business risk context first, then the area counts.
   3. Open Technical Details for the evidence behind each issue.

   Open Domain Scan Results in your console →

4. Set up Email Reports. Add a recipient: Only when new issues found

   Open Domain Scan Results in your console →

5. Compare all domains. Sort by DMARC, SPF and DKIM

   Compare the security of every domain you monitor in one table, so you can see which ones need work first.

   From the article: How to find domains that need attention

   1. Click the Total Errors heading to sort the worst domains to the top.
   2. Or sort by DMARC, SPF or DKIM to group domains missing email protection.
   3. Type in the search box to find a domain or company.

   Open Domain Summary in your console →

6. Fix missing DMARC. Publish the records, then scan again

   Set up your Lavawall DMARC reporting address, get a ready-to-paste DNS record for each domain, and choose how strictly to protect your domains from spoofing.

   From the article: How to set up DMARC reporting

   1. Check or change the Email Code. Use lowercase letters, numbers and hyphens only.
   2. List your domains in Authorized Sending Domains, one per line.
   3. Tick Enable DMARC receiver.
   4. Click Save Configuration.
   5. In DNS Record, click the copy button for each domain and add the record as a TXT record named _dmarc at your DNS provider.

   Open DMARC Setup in your console →

When you are done

The domain is monitored, its issues are listed in priority order, and missing DMARC records are published.

Articles for the pages in this guide

• DMARC Setup: Set up your Lavawall DMARC reporting address, get a ready-to-paste DNS record for each domain, and choose how strictly to protect your domains from spoofing.
• Domain Scan Results: Scan a domain from the outside, the way an attacker would see it, and get a clear list of website, email and DNS issues to fix.
• Domain Summary: Compare the security of every domain you monitor in one table, so you can see which ones need work first.

Still need help?

Search the support centre, or contact our support team and tell us which step you are on:

• Chat now: use the chat button in the bottom-right corner of this page to reach our team right away. Where cookie consent is needed, the chat starts after you accept (cookie settings).
• Email: send our support team a message through the contact page. It goes straight to a person.
• Phone: AB: 1-403-538-5053, BC: 1-778-731-1339, ON: 1-289-724-8829, US: 1-406-988-7333, UK: +44 20 3695 9786.

← All task guides