How the gate works

Email Deliverability & DMARC Enforcement Readiness Gate

This tool grades a sending domain's email authentication against the 2024 bulk-sender rules. It scores 6 weighted controls into a 0–100 number — then a gate that can only make the verdict worse.

The 6 weighted controls

01SPF published & alignedwt 18

02DKIM signed, aligned & 1024-bit+wt 18

03DMARC policy strengthblockerwt 24

04From-domain alignmentwt 20

05One-click unsubscribe (RFC 8058)wt 12

06Spam-complaint headroom vs 0.3%wt 8

ENFORCING

score 90+

AT RISK

score 60+

FAILING

below floor

Bulk-sender gate · worsen-only

For a domain sending over 5,000/day, a hard authentication blocker — no DMARC policy, or no from-domain alignment — forces FAILING regardless of the score. That mail is being rejected at the SMTP level now.

76/100

FAILING

Why: The domain sends in bulk with no DMARC policy — a hard authentication blocker — so it reads FAILING even though the six-control math lands at 76 (only AT RISK on a low-volume domain).

Fix firstPublish a DMARC policy (start at p=none to monitor, then move to quarantine/reject) — the exact DNS record is in the kit.

A high score didn’t save it. The score is context; the gate is the answer — and it names the one thing to fix first. Grades configuration, not your legal obligations. No guarantee of inbox placement.

RedHub AIthe AI that tells you when to doubt it redhub.ai/systems/email-deliverability-dmarc-enforcement-readiness-gate