Tool limitations.

Reads a domain's public SPF, DKIM (common selectors only), DMARC and MX records through Cloudflare's public DNS resolver, and explains them in plain language. The domain checked and the result are not stored.

• A clean result means the published records are correct — not that the domain, mailboxes or business are secure
• DKIM selectors cannot be listed from outside: a key not found at common selectors is reported as not found, not as missing
• Not a penetration test, a deliverability guarantee or a compliance certificate

Checks the .co.ke and .ke pair using public DNS and registry (RDAP) records. Taken domains show their registrar, transfer-lock status and expiry where the registry publishes them; some registries publish little or nothing. Nothing searched is stored.

• “Appears available” is an observation, not a reservation — availability and price are confirmed at the registrar's checkout
• Registration, billing, renewal and support happen at HOSTAFRICA, not on this site; Onduu earns no commission and the outbound link carries attribution tags only
• Registry data can lag or be incomplete; the registry's own answer is authoritative

Reads only public information about a domain: registry record, DNS, published email records, and the homepage, robots.txt and sitemap any visitor can request. Results are stored (domain, observations, score, reference) so repeat scans within 24 hours serve the cached result and any score can be reproduced; no visitor identity is attached.

• The Public Signal Score covers only what is publicly observable; Evidence Coverage says how much that is
• Anything not observable from outside is excluded from the score — it never counts as a pass or a failure
• It is not a Digital Readiness Score, a penetration test, a legal opinion or a compliance certificate
• A domain owner who does not want their domain scanned can email me@onduu.ke: stored results are deleted and the domain is blocked from future scans

• No tool on this site promises guaranteed security, compliance, rankings, leads, revenue, uptime, recovery or agent accuracy
• All tools are rate-limited and read public information only — no logins, no credentials, nothing private is touched
• Results describe a moment in time; records change, and a result is not monitoring
• What each tool stores is described in the privacy notice, which governs where this page is silent