Terms of use

These terms govern access to https://ruvalin.com and use of the free tools offered on it: the domain checker and the phishing test. They do not govern paid engagements, which are covered by the terms of service

Browsing the site or using either tool means accepting these terms. If they do not suit you, do not use them: since no account is required, leaving the page is enough.

• A description of the practice's services and how they are carried out.
• A checker that reads the SPF, DKIM and DMARC records published in a domain's DNS and gives you a reading of them.
• A phishing test of ten fictional scenarios, running entirely in your browser.
• Ways to make contact: telephone, email, and a booking calendar.

All of it is free, requires no sign-up, and will stay that way in this form. Nothing is asked in return, not even an email address to see a result.

The checker queries a domain's public DNS at the moment you ask it to, and gives you back a reading of the authentication records it finds there. It never contacts the domain itself: no HTTP request, no mail, no open port. That property is structural, not a matter of discipline.

The result is not a security audit, a complete diagnosis or personalised advice. It covers one moment and public records, which can change a minute later. A favourable reading does not guarantee a domain is protected; an unfavourable one does not by itself say what to fix.

The tool shows a finding and what follows from it, and deliberately withholds the detail of the records it read. That is not commercial gatekeeping dressed up as caution: it is a refusal to publish a ready-made reconnaissance sheet on a third-party company to anyone who can type a domain name.

In using the checker you undertake to submit only domains you own, administer, or have a mandate for. The following are prohibited:

• automated, bulk or scripted querying of the service;
• circumventing the rate limits, in particular by rotating addresses;
• using results to prepare, assist or document an attack on a third party;
• reselling, republishing or embedding the service in a commercial offering;
• any attempt to alter, probe or disrupt the site's infrastructure.

For reference, the service accepts 5 checks a minute and 30 an hour per IP address. Beyond that it answers that it is busy rather than serving you: not a penalty, just the limit that keeps the tool from becoming reconnaissance on tap.

The publisher reserves the right to restrict or suspend access to the service without notice where it is plainly used contrary to these terms.

The ten scenarios are fictional. The company names, senders and domains in them are invented or built for the exercise, and any resemblance to a real organisation would be coincidental. Some messages contain characters visually identical to Latin letters: that is the point of the exercise, not a typing error.

The score measures your answers to those ten cases and nothing else. It is not a professional assessment, a certification, or advice fitted to your situation.

The site is provided as is and as available. For these free tools the publisher gives no undertaking as to availability, continuity or accuracy. They may be changed, interrupted or withdrawn at any time, without notice or compensation.

The checker depends on public DNS resolvers operated by third parties. If they are unavailable, or answer incompletely, the result is undetermined: the tool says so rather than guessing.

The text, visual design, test scenarios and code of the site are protected. No reproduction, adaptation or substantial extraction may be made without prior written permission. The syntax of SPF, DKIM and DMARC records and the published examples, by contrast, are open standards: help yourself.

The publisher cannot be held liable for decisions taken on the strength of a result shown by either tool, nor for the consequences of a DNS change made without checking it first. A careless edit to an SPF or DMARC record can stop your email being delivered: have it verified.

So far as the law allows, indirect loss, loss of data, loss of business and commercial harm are excluded. None of these exclusions applies in cases of gross negligence or wilful misconduct, or to personal injury.

The site links to a small number of outside resources, and offers a booking calendar provided by Google, loaded only when you ask for it. The publisher does not answer for the content or availability of those services, which have terms of their own.

These terms may change as the site does. The version that applies is the one published online at the time of your visit; the date of the last update is at the top of the page.

These terms are governed by French law. In the event of a disagreement, an amicable solution will be sought first: write to contact@ruvalin.com. Failing agreement, the dispute falls to the competent French courts.

The French version prevails. This English translation is provided for convenience and does not override it in any respect.