Past ten DNS lookups SPF stops evaluating where it stands, and because nothing bounces you find out when a customer mentions the email never arrived. We flatten the record to a single lookup and re-resolve it every hour.
The scan needs no account. Plans start at 12 €/mo with a 14-day trial.
Evaluation stops here. Nothing bounces. You simply stop being trusted.
Ten lookups is a generous budget until a vendor adds a sending IP on a Sunday. Nothing tells you it happened, and the record simply stops describing reality.
Your includes are re-crawled and the flattened record rewritten when they change, so a provider adding addresses never quietly pushes you over the limit.
A record that resolves to zero addresses is a DNS failure, not a change, and is never published. Neither is one whose address count collapses: 40 down to 3 is the same failure at 92%.
You publish a single include and never edit it again. What it expands to is our problem, and it stays correct as your senders change.