Home › Sample report
Sample data
Sample email and domain audit report
We don't show made-up client cases. We show you the document format: what we look at, how we organise it and how much detail we go into when explaining it.
Frequently asked questions
What does the audit report contain?
An executive summary in business language, a traffic-light table for DMARC, SPF, DKIM and domain expiry, a prioritised list of actions, and a clear statement of what was outside the scope. Each finding explains what could happen, who it affects and what to do first.
Is the sample report a real client case?
No. The sample uses a fictitious domain to show the format and level of detail. We never publish real client cases or client names. Your own report is confidential and is delivered only to the people you designate in the signed authorisation.
What does a red DMARC result mean?
It means the domain publishes no DMARC record, or one that gives receivers no instruction to reject fake mail. In practice, anyone could send messages that appear to come from your domain. The recommended action is to publish DMARC in monitoring mode and raise the policy in phases.
Sample data. This document is a format example using a fictitious domain (company-example.es), not a real client case.
Audit report · Basic
company-example.es
Scope: 1 domain, public email and DNS records · Method: public information only · Date: date of the review
1. Executive summary
One line per risk, in business terms: what could happen, who it affects and what to do first.
2. Traffic-light rating
| Check | Status | What it means | Action |
|---|---|---|---|
| DMARC | Red (example) | No DMARC record: receiving servers have no instructions to reject fake emails using the domain. | Publish DMARC in monitoring mode with a reporting mailbox and tighten the policy in stages. |
| SPF | Amber (example) | Ends in “~all” and a service that sends on the company's behalf is missing. | Add the missing service and consider “-all”. |
| DKIM | Green (example) | The email provider signs the messages. | Keep as is; check the key length. |
| Domain expiry | Green (example) | Auto-renewal enabled. | None. |
3. Actions in order of priority
- What reduces the risk of impersonation fastest.
- What stops your legitimate emails from ending up in spam.
- Optional improvements.
4. What is out of scope
What was not reviewed, stated clearly (for example, look-alike domains or compromised accounts).