Show HN: I built a 50ms SPF record and Shadow IT scanner

(spf1.com)

2 points | by bwoud 4 hours ago ago

4 comments

  • bwoud 4 hours ago ago

    Hi HN, I got tired of manually unrolling nested SPF includes to figure out which vendors are actually authorized to send email on a domain. Most checkers just give syntax validation or Pass/Fail.

    I built SPF1 to instantly resolve the cryptic includes (_spf.google.com, etc.) into actual vendor names (Google, Mailchimp, Proofpoint) to easily spot unauthorized 'Shadow IT'.

    It's designed to be stupidly fast (<50ms). No ads, no signup walls, just a raw lookup. Would love feedback on any major vendor signatures I might have missed.

    • DamonHD 4 hours ago ago

      Tiny thing: your header title and what you show on the page are different ("Enterprise" vs "Visual").

      • bwoud 4 hours ago ago

        Great catch, thank you! I was tweaking the copy right before pushing this live and completely missed that they fell out of sync. Fixing the <title> tag now so they match.

        • bwoud 2 hours ago ago

          fixed with thanks