Stop email spoofing with DMARC monitoring.
Anyone can send email as your domain. We read the reports mailbox providers already write about it, name every sender using your domain, and walk you to the policy that makes them refuse the forgeries.
DomainCanary is a DMARC monitoring service that turns your domain's aggregate reports into one weekly email.
No account for the check · First domain free · No card
Read a sample Monday digest before you type anything.
_dmarc. Your mail goes out exactly as
before.
One email a week
- Pass rate against last week The first line says whether more of your mail failed this week than last.
- Each new sender, graded A tool a colleague connected, or a stranger forging you: the digest lists it the week it starts, with a pass or fail verdict.
- The next change to make The digest ends on the policy line to publish and the week it is safe to publish it.
- Same-day alerts on paid plans We read each report as it lands and email you the day a new sender fails.
Your dashboard: every report, every sender
Each line in the digest links to the reports behind it: 12+ months of per-source history, a trend per sender, and a daily check of your SPF and DKIM records. Every plan, including free.
One TXT record, then wait for Monday
The record proves you own the domain and asks receivers to send us their reports. Your mail carries on as before.
Paste one line
We give you the TXT record for _dmarc. If one exists, we merge
our address into it and keep your tags.
Reports arrive
Receivers send one report a day. The first usually lands within a day or two.
Read Monday's digest
It covers every report since the record went in and names the change to make next.
Prune SPF against your own reports
SPF stops at 10 DNS lookups. Paid plans grade each include against 90 days of your reports. You remove the ones that sent no mail and keep the rest.
Reach p=reject without losing real mail
You start at p=none, where delivery does not change. Each digest
names the week the next step is safe. At p=reject, receivers refuse the
forgeries.
Three plans, priced by domains watched
Pro
$19 /month5 domains, one digest across them, same-day alerts, a verdict on every include and selector.
Create your accountMSP and agency plans cover more domains than Team. Contact us for a quote.
Get a quoteEvery paid feature is free for 14 days, no card. The full plan table lists each limit.
Before you add the record
Will monitoring break my mail?
No. Providers reject mail only when your policy tells them to, and adding a reporting address does not touch the policy. We read the reports that arrive.
What if I don't have a DMARC record yet?
We give you one to publish. It starts at p=none, which only asks
for reports. Run the free check to see
where you stand.
What if I already have a DMARC record?
Keep it. When you add your domain we read the record you already publish and
hand it back with our rua= reporting address merged in, so your
policy and any existing reporting addresses stay exactly as they are. You paste
the merged record over the old one, because receivers only read one DMARC record
per domain.
How fast do I see something?
The first reports arrive a day or two after the record goes in, and the digest goes out on Monday. On a paid plan, a realtime alert arrives the same day the report does.
What do you do with my report data?
We parse it and mail it back to you. Aggregate reports name sending IPs and carry no message content. We'll never publish, resell or share your data.
Add the record today, read Monday's digest
Receivers start reporting within a day or two of the record going in. We read what they send and mail you the summary.
First domain free · 12+ months of history · No card
- $0 for your first domain, and the plan does not expire
- 12+ months of per-source history on every plan
- Priced by domains watched, so a busier month costs the same
- 14 days of every paid feature, no card