PostureCheck FAQs

Question 1

What is PostureCheck?

Accepted Answer

PostureCheck is a robust domain security analysis tool designed to perform comprehensive checks on critical security aspects including email authentication (SPF, DKIM, DMARC, MTA-STS), TLS certificates and protocol support, and HTTP security headers for any specified domain.

Question 2

What specific security aspects does PostureCheck analyze?

Accepted Answer

It thoroughly analyzes SPF records (including include tree resolution and DNS lookup count), DKIM key presence and strength, DMARC policy, MTA-STS configuration, TLS certificate validity, expiry, protocol support (TLS 1.0-1.3), and HTTP security headers like HSTS, CSP, and X-Frame-Options.

Question 3

What kind of information does PostureCheck access during a scan?

Accepted Answer

PostureCheck strictly reads publicly published DNS records and makes standard HTTPS connections – the same information any browser or mail server receives. It does not probe, exploit, or store results, ensuring that nothing is accessed beyond what is publicly observable and conforming to its scanning policy.

Question 4

How does PostureCheck help improve email security and prevent spoofing?

Accepted Answer

PostureCheck validates your domain's SPF, DKIM, DMARC, and MTA-STS configurations. By identifying common misconfigurations and policy weaknesses (e.g., 'p=none' DMARC policy or softfail SPF), it helps you enforce stronger email authentication, significantly reducing the risk of email spoofing and phishing.

Question 5

Do I need to install PostureCheck to use it?

Accepted Answer

No, PostureCheck requires no traditional installation. It runs directly via `npx`, making it easy to integrate and use with compatible AI clients such as Claude Desktop, Cursor, Cline, and Windsurf by simply adding a configuration snippet.

PostureCheck

주요 기능

사용 사례

Neon

Figma Context

Magic

Background Coding Agent

Sherpa ONNX Local Text-to-Speech

1Password CLI