Help Center
News
Go back to application
Help Center
News
Go back to application
Automated security scans
How is the security score calculatedHow is our DNSSEC assessment performedHow is our SPF assessment performedHow is our DMARC assessment performedHow our SSL/TLS assessment is performedHow our Security Headers assessment is performedHow our Potential Vulnerability assessment is performedHow our Blocklist assessment is performedHow our Open Ports assessment is performedHow our Active Vulnerability scanner worksHow to get the best results from our attack surface scans?
Digital footprint analysis
How do we uncover Applications in the digital footprintHow do we uncover IP addresses in the digital footprintHow do we uncover Software used in the digital footprintHow do we uncover Cloud Storage in the digital footprintHow do we uncover Email Addresses in the digital footprintHow do we uncover Files in the digital footprintHow do we uncover Similar Domains in the digital footprint
Account management
How to add or delete primary domains from your digital footprintHow to add or delete users from your accountHow can I impose 2FA on my company's users?Setting up SSO authentication with your identity provider (IdP)
Managing suppliers
Adding suppliers to your supply chain on the Ceeyu platformHow to configure supply chain risk scoring
Building questionnaires
Establishing parent child relationships between questionsHow to test a questionnaireHow to configure rating of a questionnaireHow to configure assessment workflows
Integrations
Integrating Ceeyu with third-party applications
Trust Center
Trust Center overviewManaging content in your Trust CenterManaging access to your Trust Portal contentCustomizing Your Trust Portal BrandingSetting Up a Custom Domain for Your Trust PortalManaging certifications in your Trust Center

How is our SPF assessment performed

Ceeyu assesses the presence of SPF by querying the DNS system for your domain and by verifying if the SPF record is present.

We also check that the registration is configured in accordance with the SPF RFC. This is the case if none of the following problems are present:

  • There can be only one SFP record per domain.
  • The number of lookups being done to fetch all allowed IP addresses must be below or equal to 10.
  • The amount of netblocks (blocks of IP addresses) you authorize in your SPF record must be below 75. The more netblocks, the more servers that can send mail on your behalf. The lower the number of netblocks, the lower the risk an unattended IP addresses changes ownership to a party with malicious intentions.
  • Duplicate IP addresses or netblocks cannot be present as these render your SPF record non-RFC compliant.

Was this article helpful?

Powered by Product Fruits