Know exactly what your email DNS should say.
Mxlyst reads what your domain publishes today, identifies what is wrong, risky, conflicting or simply unobservable, and produces one merged, provider-aware DNS change plan you can apply with confidence.
Mxlyst never writes to your DNS. It tells you precisely what to change; you apply it.
Conflict-aware SPF merging
Multiple senders should never mean multiple SPF policies. Mxlyst merges compatible provider requirements into one valid record — and surfaces the exact conflict when they cannot be merged safely.
Deterministic findings
Every pass, fail and conflict comes from versioned protocol rules, not from a model's opinion. The same DNS always produces the same verdict.
Honest UNKNOWN state
DKIM selectors are not always discoverable. When something cannot be observed, Mxlyst says UNKNOWN and asks you for the value — it never quietly reports a pass.
What Mxlyst evaluates
Every check runs in a trusted backend environment against live DNS, wherever the record is observable and applicable to your domain.
A change plan, not a warning list
Other tools tell you your DMARC policy is weak. Mxlyst tells you the record to publish, the record to remove, the two provider requirements to merge, and the single value only your provider can give you — each tagged with an explicit action.
When provider requirements genuinely conflict, Mxlyst shows the conflict and requires manual review instead of inventing a solution.
Already correct — leave it alone.
A required record that does not exist yet.
An existing record with the exact new value.
Multiple provider requirements into one valid policy.
A record that conflicts or is no longer needed.
Confirm at the provider before changing DNS.
A value only your provider can supply.
A conflict we will not guess our way around.
Provider-aware from the first scan
Tell Mxlyst which email services your domain uses, supply the provider-specific values where they are required, and the plan is built around the senders you actually run.
Then it keeps watching
DNS drifts. A contractor edits a record, a provider rotates a key, a migration drops an include. Continuous monitoring re-runs the same deterministic checks and alerts you when your configuration regresses.
Start monitoring a domain
Get your domain right, and keep it right.
Plans start at $9/month for a single managed domain.