SPF DKIM DMARC Audit Workflow for Multiple Domains (n8n + Apify, Gmail, Slack)

Stay ahead of email deliverability: automatically audit SPF, DKIM, and DMARC for multiple domains

This n8n workflow runs daily (or on demand) to check your domains’ SPF, DKIM, and DMARC using the Apify Email Deliverability Auditor, records results in an n8n Data Table, and notifies you via Gmail digest emails and Slack when findings are new, changed, or fixed.

What this workflow does

• Schedules and configuration: Runs daily at 7:00 (or can be started manually) and loads domain + DKIM selector + notification settings from a configuration block.
• Ensures a ledger: Creates/uses a deliverability_ledger n8n Data Table to track the latest state per domain/check.
• Audits multiple domains: Splits the configured domain list into one item per domain and calls the Apify Email Deliverability Auditor for SPF, DKIM, and DMARC.
• Retry on failure: If an audit fails, it retries once after 30 seconds. If both attempts fail, it records an DNS/audit failure finding.
• Classifies findings: Converts audit output into per-check results labeled as critical, warning, info, or ok.
• Detects changes: Compares current findings to the ledger to mark each check as new, changed, still open, fixed, or ok, then upserts the latest state.
• Notifies: Builds an HTML digest and sends it via Gmail every run. Posts to Slack only when there are changes.

Use cases

• Operate SaaS email authentication monitoring across many customer domains without manual SPF/DKIM/DMARC checks.
• Catch regressions after DNS changes by tracking “changed” vs “fixed” deliverability findings.
• Automate compliance-style reporting with a daily Gmail digest and Slack alerts for actionable updates.

Technical details

• Apify integration: Uses an Apify HTTP Header Auth credential with Authorization: Bearer <YOUR_APIFY_TOKEN>.
• n8n workflow nodes: if, set, code, no op, wait, gmail.
• Channels: Gmail for the HTML digest; Slack for a change summary (configurable to disable either).