emailrules.today

Embeddable mark

Put the check in your own report

Two lines of HTML that render a live SVG: the domain, what its authentication actually says, and the date it was verified. Drop it in a client report, a deck, a README or a proposal. It re-checks itself, so a mark you pasted in March is not still asserting March.

Email authentication check for emailrules.today — emailrules.today

Live, right now, for this site’s own domain. Nothing above is a mockup — if our authentication slips, this is the first page that says so.

Free, no account, no attribution requirement. Use it on as many client domains as you run.

What it will say, and what it refuses to

  • It carries the date. That is the whole point of the word “today” in our name. An undated authentication claim is worth nothing: DNS changes the afternoon someone adds a tool.
  • It can say something unflattering. If the domain has two things to fix, the mark says two things to fix, in red, on your client’s page. A badge that only ever renders “verified” is marketing, and the first reader who notices will say so in public.
  • No score, no grade, no percentage. We have watched two tools score the same campaign at 85 and at 40. A number on a badge is the most tempting place in this whole site to invent one, which is exactly why there is none. Findings, with the dated rule behind each.
  • It links to the full result. Every mark is wrapped in a link to /check/<domain>, so a reader who doubts it can run the same lookups and see every finding with its source. We do not ship an assertion without a way to check it.

How it behaves once it is out there

The image is plain SVG with no webfont, no script and nothing loaded from anywhere — it renders the same on a page that has never heard of us. Results are cached for six hours and served stale while they refresh, so a report with a thousand readers is one DNS lookup, not a thousand. When a lookup fails the mark says it could not verify rather than guessing, and it says that in grey: a resolver that did not answer is our failure, not your client’s.

Nothing is logged about who embeds it. There is no pixel in here — a site that argues tracking pixels may be unlawful in France cannot ship one in a badge.

Run the full check first

FAQ

Awkward questions

Who is this actually for?

People who ship email and are too busy to re-read every PDF: week-one marketers, lifecycle/CRM, deliverability, multi-country ops, DTC brands, agencies — on Klaviyo, Mailchimp, Braze, HubSpot, SFMC, or something else. Pick your tool and geos so product-specific pages only appear when they match. EU and UK are first-class filters. Not for people who sell tools about email and need a fake score to demo.

Why only ~40 rules? Isn’t that… thin?

On purpose. A wall of 400 undated “best practices” is how you look busy and still get burned. Every page needs a primary source we actually read. Thin and checkable beats fat and folklore. Europe, bulk inbox rules, measurement honesty, and protocol topics like BIMI/DMARC policy are on the shelf when we can cite them — not every Member State and not every vendor myth. Coverage map lists what we still refuse to invent.

Is this legal advice?

No. If it were, you’d have a billable hour and a longer PDF. This is a dated operator reference written by an email geek. Confirm anything high-stakes with counsel who knows your facts. Same for “will this make me compliant?” — no tool does that. Lawyers and judges do. We say what the sources say and what to do first on Monday.

Why no trust score out of 100?

Because we refuse to invent a number you can’t audit. Fake scores sell seed tests and panic. You get findings, dates, and links. If that feels less exciting than a red dial, good — you’re not the red-dial customer.

Why should I trust you more than my ESP’s blog?

ESPs sell seats. Seed-score vendors sell fear. AI invents citations when nobody watches. We sell nothing today — no pixels, no placement scores, no affiliate — so we can say when a tool is the problem. A human verifies, dates, and corrects in public. Tools may help draft; they do not ship unsourced claims. Check the primary links. Fail that test and leave.

Do I need an account?

No. Filters live in this browser and the URL. Share the link. That’s it. Accounts come later only if they earn it — not so we can nurture you about email.

I’m an agency. Where’s multi-client mode?

We tried a client-name CRM on the setup card. It made the product feel like work before it felt useful. Role filters + copy link + one-page brief (optional PDF title) is enough for now. Complexity comes back when the free shelf is habit, not before.

Is the quiet changelog a bug?

No. Quiet means nothing material moved. We don’t invent urgency so the homepage looks “alive.” Sticky risks still show what usually needs a person when the market is still.