Practical Security Guides For Your Team

Your domain has a DMARC record, but it's set to 'monitor only' — meaning it watches for suspicious email activity but takes no action to stop it. Anyone can currently send emails that appear to come from your domain, and those emails will land in recipients' inboxes unchallenged. Think of it like having a security camera but no lock on the door.

Your domain account.roamler.com is missing a security record that tells email providers how to handle messages that pretend to be from you. Without it, someone could send emails that appear to come from your domain — like a fake invoice or login request — and many recipients' inboxes would accept them as legitimate. This is a configuration gap, not an active attack, but it's worth closing.

Your domain is missing a basic email safety record called SPF. Without it, there is no mechanism in place to tell other email services which servers are allowed to send email on your behalf. Think of it like a building without a guest list — anyone can show up claiming to be from your company.