Clear checks. Written approval. A record you can keep.

Start with what the domain publishes.

The free check reads public email records and selected website signals. It does not inspect every service that sends for you, read your mailbox or establish that your business is secure.

SPF, DKIM and DMARC help participating mail systems evaluate messages using your exact domain. They do not stop lookalike domains, compromised accounts, fake display names or social engineering. Account security and payment verification need their own controls.

Keep access with the people responsible for it.

The public check needs no mailbox password or login. For setup, your DNS administrator or IT provider can publish approved changes directly, or arrange appropriate least-privileged access. Do not send passwords, recovery codes, private keys or private client files through a public form.

Approve the change before it happens.

Agree on the domain and included senders first. Review the exact proposed DNS changes and rollback reference. Publication requires separate written approval; an inquiry is not that approval.

Receive the results, not just a score.

Shield Setup is a flat, one-time engagement. You receive the final records, checks, decisions, and open items in a dated Shield Record. Optional managed review is separate and can be canceled at any time.

Know who is responsible.

Al Cirton leads Kova Shield as part of Kova OS. Your existing IT provider retains ownership and access. The handoff identifies what Shield checked and what still needs an owner.