SPF

WM Guard detects whether an SPF TXT record exists and which all behavior it specifies. A missing SPF record can affect the health index when online diagnostics have actually performed this check.

DMARC

For DMARC, WM Guard checks whether a valid record exists and which policy is configured. A missing DMARC record can likewise be treated as an open signal.

DKIM

DKIM is not evaluated generically because the check would need to know the specific selector used by the mail system.

Coordinate SPF, DKIM, or DMARC changes with the actual mail provider so legitimate email is not unintentionally rejected.