When mail fails authentication, you can now check just the record you suspect instead of wading through a combined report. Each check has its own page, and they're free with no account.
- SPF: the record and how many lookups it uses.
- DKIM: the signing record at a selector you name.
- DMARC: your policy and alignment settings.
- BIMI: whether the domain is ready to show a brand logo.
- Everything at once, if you'd rather see it all.
The authentication guide explains how the records work together.