Tune-Up
Four checks, one grade, plain English. Tune-Up looks at your email authentication, TLS certificate, blocklist status and security headers, and tells you which one to fix first. A complimentary tool from Squish — no signup.
Try , ,
Why one report beats four tabs
Domain problems rarely arrive alone. The certificate that lapsed is on the server whose security headers were never set; the blocklist entry traces back to the same compromise that is now sending mail your SPF record never authorised. Checked one at a time, each looks like a small separate chore. Checked together, the order to fix them in becomes obvious — which is the only thing you actually needed to know.
Common questions
How is the overall grade worked out?
It is the average of the checks that completed, but it can never be more than one grade above the worst one. That second rule is the important half: a domain with an expired certificate is not healthy because its email is perfect, and averaging would let a site nobody can open score a B.
Why did one bad check pull my whole grade down?
Because that is what the cap is for. A single soft warning costs you a grade, not the report — but a genuine failure is a genuine failure, and the honest thing is to say the domain is in that shape rather than hide it in an average. Fix the worst one and the overall moves straight up.
What if a check doesn't finish?
It is left out of the grade and named on the report. We never count a check that timed out as a check that failed — that would be a verdict on something nobody measured. If none of them complete you get an error, not an F.
Why isn't DNS one of the grades?
Because it is the thing everything else needs. Every domain that resolves would score full marks on it, so as a grade it tells you nothing — and if it doesn't resolve, none of the other checks could run anyway. So it decides whether there is a report at all, rather than being a line in one.
Is this the same as the individual tools?
Yes — the same engines, in one report. Each section links to the tool it came from if you want the full detail behind a grade.
Most of what this report finds is server configuration. On Squish hosting it is set up once and kept that way, so the grade stays where you put it instead of drifting the next time something renews.
See Squish hosting →