Is your domain being spoofed?
The vast majority of domains that publish a DMARC record are stuck at p=none, so they watch spoofing happen but never block it. Scan yours free, then let us take you to enforced p=reject in a matter of weeks, with no email outage.
Free, instant and no sign-up. We check DMARC, SPF, DKIM, MTA-STS & BIMI live. Or get a full report by email & monitoring.
What an unprotected domain costs you
Without enforced DMARC, your domain is a free tool for fraudsters, and your own email is now at risk too.
Invoice & CEO fraud
Anyone can send email that looks exactly like it is from you. Fake invoices and payment-change requests land in your clients' inboxes, with your name on them.
How it worksLost deliverability
Gmail, Outlook and Yahoo now bounce or spam non-compliant senders. Your genuine quotes, statements and newsletters quietly stop arriving.
Why it happensFailed compliance
PCI DSS 4.0, cyber-insurance questionnaires and vendor security reviews increasingly require enforced DMARC. A policy of p=none does not pass.
What reviewers checkDone-for-you enforcement, safely
The hard part is not turning DMARC on. It is reaching p=reject without blocking your own email. We do it for you in a staged, monitored rollout.
Audit
We scan your live DMARC, SPF and DKIM and map every service that sends mail as you.
Read moreAlign
We fix SPF flattening and DKIM alignment so all your legitimate senders pass authentication.
Read moreEnforce
We move you none, then quarantine, then reject on a monitored schedule, watching reports at each step.
Read moreMonitor
Continuous reporting and alerts keep you at p=reject, so a misconfiguration can never quietly reopen you.
Read moreOne platform for every email-auth record
Host and manage your whole authentication stack, with multi-domain aggregate-report analysis that free tools deliberately limit.
Hosted DMARC
Records, staged policies and aggregate (RUA) report ingestion.
Hosted SPF
Automatic SPF flattening to stay under the 10-lookup limit.
Hosted DKIM
Key-pair generation and selector management.
MTA-STS & TLS-RPT
Enforce TLS for inbound mail and capture failure reports.
BIMI
Show your verified logo in supporting inboxes.
Analytics & alerts
Pass-rate trends, threat sources and near-real-time alerting.
Built to be trusted, not just bought
No lock-in, no migration and no guesswork: just the open email-authentication standards, done properly.
Simple, outcome-based pricing
The free domain check is always free, no account needed. Paid plans add always-on hosting, report ingestion and alerts. Every new account starts with a 14-day free trial of full Monitor features, no card required. Introductory pricing, in GBP.
Always-on monitoring for cost-conscious owners.
- Daily record watch and alerts
- 1 domain, hosted DMARC record
- Basic RUA digest (7-day history)
- 2 alert channels (Email, Slack)
The real product for small businesses.
- Full hosted DNS (all 6 records)
- Full RUA analytics (12-month history)
- Auto SPF flattening, plus 5-minute drift detection
- 4 alert channels, plus API
For businesses with several domains.
- Up to 5 domains, 10 team seats
- Everything in Monitor
- Consolidated multi-domain reporting
- SSO and priority support
Compare every plan
Every paid plan includes the daily record watch. Higher tiers add hosting, report analytics and automation. Agency resellers start at £9/domain.
Scroll sideways to compare every plan →
| Feature | Starter | Watch | Monitor | Growth | Agency |
|---|---|---|---|---|---|
| PriceIntroductory pricing, in GBP | £12/yr | £5/mo | £19/mo | £49/mo | £9/domain/mo |
| Best for | Set-and-forget watch | Cost-conscious owners | Small business | Multi-domain | Resellers |
| DomainsSeparate domains you can protect from one account | 1 | 1 | 2 | 5 | Unlimited |
| Team seatsTeammates who can log in and manage it | 1 | 1 | 3 | 10 | Unlimited |
| Monthly email volumeMonitored messages per month included (fair-use guardrail; higher volumes scale up a tier) | — | 50K | 500K | 2M | Unlimited |
| Daily record watch and breakage alertsWe re-check your published DMARC and SPF every 24 hours and email you the moment they disappear or weaken | |||||
| Hosted DNSWe serve your records at the edge, so you never touch DNS again | DMARC only (1 record) | All 6 records | All 6 records | All 6 records | |
| RUA report ingestion and analyticsWe parse the aggregate reports mailbox providers send into pass-rate trends and threat sources | 7-day history | 12-month history | 24-month history | Full history | |
| Automatic SPF flatteningResolves nested includes to keep you under SPF's 10-lookup limit, refreshed every 6 hours | |||||
| Delegation drift detectionWe re-verify your delegation every 5 minutes and alert within ~15 minutes of a break | |||||
| Alert channelsWhere we deliver alerts | 1 (Email) | 2 (Email, Slack) | 5 (all) | 5 (all) | 5 (all) |
| Consolidated multi-domain reportingOne combined view across every domain you manage | |||||
| API accessScoped API keys to automate from your own tools | |||||
| Done-for-you enforcementOur team stages your domain to p=reject for you, with no email outage | £200 add-on | £200 add-on | £200 add-on | ||
| SupportHow you reach us | Priority | Partner | |||
| Start free trial | Start free trial | Start free trial | Start free trial | Talk to us |
Included Partial or limited Not included
We take a domain from p=none to a safe p=reject for you: audit, alignment and a monitored staged rollout with no email outage. Pairs with any hosted plan (Monitor or above).
Get enforcementJust checking a domain? The free scan and our free tools are always free, no sign-up. Are you an MSP or agency? We offer done-for-you enforcement at partner pricing, with you in front of the client. Get in touch.
Frequently asked questions
Will enforcing DMARC break my email?+
No, and that is the whole point of doing it in stages. We align every legitimate sender first and watch your aggregate reports at each step, only tightening the policy once nothing legitimate is failing.
How long does enforcement take?+
A few weeks of monitored rollout for a standard setup, and longer for domains with many sending services. We only tighten the policy once your live reports show it is safe.
Isn't DMARC free? Why pay?+
The records are free. Getting safely to p=reject without blocking your own mail, and keeping it there, is the hard and valuable part that free tools skip. We do it for you.
What is the difference between p=none and p=reject?+
A policy of p=none only monitors, so spoofers can still impersonate you. A policy of p=reject tells inboxes to refuse mail that fails authentication, which is what actually stops spoofing.
Do you support multiple domains?+
Yes. The platform aggregates RUA reports across all your domains in one view, the paid value most free tools deliberately limit.
Find out if your domain is exposed, in 10 seconds
See your live DMARC, SPF and DKIM status free, then let us take you to enforced p=reject with no email outage.
No sign-up needed · 15+ free tools · Results in seconds