About PostureAudit

PostureAudit is a business software service that checks whether a domain's published email records are configured correctly, and explains how to fix them when they are not.

What it does

Given a domain name, the service reads that domain's publicly published DNS records — SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, BIMI and DNSSEC — and reports whether each is present, valid, and effective. Findings include the records the verdict was drawn from and a specific remediation step. Results are returned as a web page for people and as JSON for software.

It is used by domain owners checking their own configuration, by agencies and managed service providers auditing client domains, by email and outreach platforms qualifying a customer's sending domain, and by security teams assessing whether domains can be spoofed.

What it does not do

This is a read-only diagnostic tool. Specifically, it:

• reads only public DNS records and publicly published policy files — the same information any mail server sees when deciding whether to accept a message;
• sends no email, on anyone's behalf or otherwise;
• requires no credentials for any domain, and asks for nothing beyond a domain name;
• accesses no private system belonging to the user or to the domain being checked;
• collects no personal data — the service takes a domain name, and needs nothing else.

It performs no scanning, intrusion, exploitation, or credential testing of any kind. Every lookup it makes is a standard public DNS query.

Who operates it

PostureAudit is operated by SweedWorks LLC, a Michigan limited liability company in the United States.

The service is sold on a self-serve basis, directly and through the RapidAPI marketplace. Billing and subscription management are handled by the payment provider or marketplace you subscribed through. Use of the service is governed by the Terms of Use.

For network administrators

If you are reviewing this domain for content categorisation, the appropriate classifications are Business, Information Technology, or Computer and Internet Info. The service is a diagnostic and compliance tool for domain administrators; it is not a hacking, penetration testing, or network attack tool, and provides no capability to act against a third party's systems.

The API is served from api.postureaudit.com and the site from postureaudit.com. Both are static or read-only endpoints over HTTPS.