In simple English
Many people can send fake emails that look like they come from your domain. Mailgoose is a web application that checks your domain security settings to stop this. You type in your web address, and the tool inspects your records. It tells you if anything is missing or broken. You pay nothing in money, but you need a server to run the software.
What it is
Mailgoose is a self-hosted (software you run on your own server rather than paying a company to host it) web application written in Python (a programming language). It tests your SPF, DMARC, and DKIM (three standard ways to prove an email really came from your domain) settings to make sure your mail server is secure.
What it is good for
This is good for solo builders and system administrators who want to host their own domain health checker. It removes the need to trust random public websites with your domain configuration tests.
- Checks all three major email security standards at once.
- Open-source software under the BSD-3-Clause licence.
- Backed by a national cybersecurity team.
- Requires technical knowledge to host and set up a web application.
- Needs a dedicated server or virtual private server to run.
- Documentation relies on external guides for full deployment steps.
manual DNS lookups and third-party checker websites
Postfix
- domainaware/checkdmarc323 stars
A command-line tool that checks domain email security records without the web interface.
- smallstep/certificates9.0k stars
A certificate authority you run yourself, for machines the public internet cannot reach.
- michelp/pgsodium614 stars
A PostgreSQL extension that brings libsodium's encryption functions into SQL, with a root key the database cannot read back.
- pgaudit/pgaudit1.7k stars
A PostgreSQL extension that records what was done to the database, in the database's own log.
git clone https://github.com/CERT-Polska/mailgoose.git cd mailgoose python3 -m venv venv source venv/bin/activate pip install -r requirements.txt