See your site the way ChatGPT, Claude, Google and mail servers see it

Two scores in seconds: whether AI assistants and search engines can actually read your site, and whether anyone can send email as you. Every finding comes with the exact record, file or tag to paste.

Free · no sign-up · results in seconds

We request your page as GPTBot, ClaudeBot, Googlebot and Bingbot and show you the response each one actually gets.

What AstraVerify is

AstraVerify is a free domain checker for founders, marketing owners, IT admins and the agencies that manage many domains. Enter a domain and it fetches your site as Googlebot, Bingbot, OAI-SearchBot, PerplexityBot, ClaudeBot and GPTBot to see what each one actually receives, checks the files and tags those crawlers read (robots.txt, sitemap, redirects, page metadata, structured data, llms.txt), and reads the public DNS records that decide whether mail from the domain is trusted (MX, SPF, DKIM, DMARC). You get a Discoverability score, an Email Security score, and the exact record, file or tag to publish for every finding.

What it checks

Discoverability score 100 points

Can search engines and AI assistants reach your site, understand it, and quote it?

  • Crawl access25

    robots.txt is readable and does not block search, answer-engine or AI-training crawlers, and the edge (CDN, firewall) actually serves the page to Googlebot, Bingbot, OAI-SearchBot, PerplexityBot, ClaudeBot and GPTBot.

  • Site plumbing20

    Valid HTTPS, http and www redirecting permanently to one canonical host, no noindex on the root page, a valid sitemap declared with an absolute URL, lastmod dates and real 404s.

  • Page metadata20

    Title and description at search-result length, exactly one H1, an absolute canonical link, Open Graph and Twitter tags, and a 1200×630 preview image that loads.

  • Structured data20

    JSON-LD that parses and names the Organization, the WebSite and the type of thing the site offers, with BreadcrumbList on inner pages.

  • Answer-engine readiness15

    An llms.txt file, an opening paragraph that defines the brand, question-form headings with direct answers, enough real text, and a declared language.

Email Security score 100 points

Can someone send email as you, and does your own mail reach the inbox?

  • MX records25

    Confirms the domain can receive email and identifies the mail provider (Google Workspace, Microsoft 365, and others).

  • SPF25

    Verifies a valid v=spf1 record, the servers it authorises, and whether it ends in -all (reject) or ~all (soft fail).

  • DKIM20

    Finds published signing keys across common selectors and checks key strength; a live email can confirm the selector in use.

  • DMARC30

    Checks the policy (none, quarantine, reject), alignment mode and reporting addresses, which together decide whether spoofed mail is blocked.

How it works

  1. 1Enter a domain

    Type a domain you own or work with. No account needed.

  2. 2Get two scores in seconds

    Email results appear first because DNS answers instantly; the discoverability scan fetches robots.txt, your sitemap, the root page and a few inner pages at the same time, and requests the page as each named crawler.

  3. 3Fix what matters

    Each recommendation says what it costs you and gives the exact DNS record, file or HTML tag to publish, then a Verify button re-checks that one item.

Results come straight from public DNS and HTTP in a few seconds. Nothing to install, no account. You can see your site exactly as a named crawler sees it, and confirm the DKIM selector your mail service really uses by sending one email.

Need it done, or watched?

Fix packages

We make the exact changes a scan recommends, for one domain, verified by rescan. A quote is free.

Monitoring

Weekly rescans of both scores, history, and an alert within a day of any change to DNS records, robots.txt, redirects, certificates or crawler access. 14-day free trial, then billed monthly per domain; cancel any time.

Both are offered on a domain's result page.

Frequently asked questions

What is SPF?

SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are allowed to send email for your domain. Receivers check the sending server against it. A record ending in -all tells receivers to reject anything else; ~all only marks it as suspicious.

What is DKIM?

DKIM (DomainKeys Identified Mail) adds a digital signature to each outgoing message using a private key. The matching public key is published in DNS under a selector, such as google._domainkey.example.com. Receivers use it to verify the message was not altered and really came from your domain.

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS record that tells receivers what to do when a message fails SPF and DKIM alignment: nothing (p=none), send it to spam (p=quarantine) or reject it (p=reject). It also lets you receive reports about who is sending mail as your domain.

Why does my domain score less than 100?

Points are awarded per record: MX 25, SPF 25, DKIM 20 and DMARC 30. Missing records score zero, and weak settings such as SPF ~all, DMARC p=none or a 1024-bit DKIM key cost points. The recommendations list shows exactly which change would raise the score.

Why can DKIM not always be found from DNS alone?

DKIM keys live under a selector name that is not listed anywhere in DNS. AstraVerify checks around 80 common selectors used by Google, Microsoft, and popular email services. Providers such as Amazon SES or Postmark use random selectors, so the tool also lets you send one email from your domain to read the real selector and confirm that outgoing mail is signed.

What does the Discoverability score measure?

Whether search engines and AI answer engines can crawl, read and quote the site: robots.txt rules and real crawler access at the edge (25 points), site plumbing such as HTTPS, one canonical host, sitemap and 404 handling (20), page metadata (20), structured data (20) and answer-engine readiness including llms.txt and a definitional first paragraph (15). It reads the root page and up to four pages from the sitemap; it does not measure keywords, rankings or backlinks.

Why does blocking AI crawlers lower the score?

A site that GPTBot, ClaudeBot, PerplexityBot or OAI-SearchBot cannot read is not quoted in ChatGPT, Claude or Perplexity answers and is not described from its own words in future models. Blocking them is a legitimate choice, and the score simply reflects the consequence: blocking search crawlers is critical, blocking answer-engine crawlers is important, blocking training-only crawlers is a recommendation.

Does AstraVerify crawl my site?

Only when someone enters your domain and presses Scan: about 14 to 18 requests for robots.txt, the sitemap, the root page, up to four inner pages, llms.txt, the preview image and one deliberately missing URL, finished in a few seconds and cached for 15 minutes. Opening a result link never triggers a fetch. The bot identifies itself as AstraVerifyBot and honours a Disallow rule for that name.

Is AstraVerify free?

Yes. Both scans, the scores, the recommendations and the emailed report are free, with no sign-up. Two things are paid: having the fixes done for you (fixed-price packages per domain) and monitoring, which rescans a domain weekly, keeps the history and emails you when something changes (14-day free trial, then monthly per domain). Monitoring also reads your DMARC reports: we issue you a reporting address, and every mailbox provider your mail reaches — Gmail, Microsoft, Yahoo, Apple and the rest — sends its daily report there for us to parse, so you can see every service sending as your domain and whether each one authenticates.

What does processing my DMARC reports actually give me?

A list of who is sending as your domain, which the scan cannot tell you. The scan reads your DNS; DMARC reports come from the receivers themselves. Every mailbox provider your mail reaches — Gmail, Microsoft, Yahoo, Apple, Fastmail and anyone else running DMARC — sends a daily XML report to the address in your record, from any provider whose users you email. We give you an address of your own, parse what arrives, and show each sending service with whether SPF and DKIM aligned for it. That is how you find the invoicing tool or newsletter nobody remembered, and how you know enforcing is safe before you move to p=reject rather than after.

Can you fix it for me?

Yes. Under the recommendations, choose Request a fix. A request is free and answered within one business day; a paid package covers the listed items for one domain, done directly with access you grant or as exact instructions to whoever manages your DNS and site, and verified by rescan.

Guides