Skip to content

← Email security

DMARC report analyzer

Those daily rua=XML files are unreadable by design. Paste one here and we'll turn it into a per-source breakdown — who's sending as you, what's aligned, and whether you can safely tighten your policy.

Paste a DMARC aggregate report (XML)

Runs in your browser — nothing is uploaded.

Receivers email these XML files daily to the rua= address in your DMARC record. They often arrive gzip-compressed (.xml.gz) — decompress first, then paste the XML here.

What this tells you

  • Who sends as you — every source IP that used your domain in the From address during the report window, with volume.
  • What's aligned — whether each source passed SPF and DKIM alignment (not just SPF/DKIM in isolation). Unaligned legitimate senders are exactly what you must fix before enforcing.
  • Whether it's safe to enforce — a verdict on moving from p=none toward p=quarantine / p=reject, based on your measured alignment rate and volume.

One report is a snapshot. Enforcement decisions need weeks of trend, deduped across every receiver. Our DMARC visibility tool ingests your rua=mailbox automatically, rolls up every source over time, and tells you the moment it's safe to advance — no copy-paste.