SPF (Sender Policy Framework) is a setting in your domain's DNS that tells email servers which services are authorised to send email on your behalf. Other audit tools often report this finding as "no SPF record found".
Why this matters
Without SPF, anyone on the internet can send emails that appear to come from your domain. This enables phishing scams using your brand name and can cause your own emails to land in recipients' spam folders.
How to fix it
Ask your website host or IT provider to add an SPF record to your domain's DNS settings. If you use Google Workspace or Gmail, the value is: v=spf1 include:_spf.google.com -all. If you use another email provider, include their specific value too.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.