Live · paid plan

DMARC visibility & enforcement

Upload the aggregate reports your receivers already send you. See every IP claiming to send mail from your domain. Stop guessing about who your senders are.

Open dashboard See pricing

Aggregate ingestion

Upload the daily RUA reports Google, Microsoft, and Yahoo already send to your rua=mailbox. We parse the standard RFC 7489 XML and index every record.

Per-source alignment

For every source IP, see message volume, SPF / DKIM alignment rates, and whether the source is on your trusted-sender list.

Untrusted-sender flag

Anything sending mail as you but failing alignment surfaces front and center. Catches shadow IT before it costs you deliverability.

Policy progression

Once your trusted senders are 100% aligned, we tell you it's safe to move from p=none → p=quarantine → p=reject. No more “is it safe yet?” guesswork.

How it works

1. Publish a DMARC recordAdd v=DMARC1; p=none; rua=mailto:[email protected] to your DNS. Receivers will start sending aggregate reports within 24 hours.
2. Forward the reports hereEither upload the daily XML zips through the UI, or POST them to the public API (Pro). We dedupe by report id so re-uploads are safe.
3. Tame your sender populationIdentify your real senders, add SPF / DKIM where missing, and watch the alignment rate climb toward 100%.
4. Graduate the policyWhen alignment is solid, the dashboard tells you to flip to p=quarantine, wait, then p=reject.

Keep hardening your email

Each record is one layer. Check the rest of yours — every tool is free, no account.

Scan all 8 at once →

Email security scan

Run all 8 checks at once

SPF builder

Assemble a clean SPF record

SPF analyzer

Count your real DNS lookups

DMARC generator

Build a v=DMARC1 record

DMARC validator

Grade a record you have

DMARC report analyzer

Read a rua= XML report

DKIM validator

Check a DKIM key

Header analyzer

Trace a suspicious email

Blocklist checker

Are you on a DNSBL?

BIMI check

Get your logo in inboxes

MTA-STS

Force TLS on inbound mail

TLS-RPT

Get TLS failure reports

Continuous monitoring

Catch record drift on a schedule