DomainCanary Start free

Check your domain

Live DNS lookups of the DMARC policy, the SPF record, the DKIM keys and your mail servers, read the way receivers read them.

This lookup only shows what you published in DNS. Your DMARC reports show which of your real senders pass, and we read them to decide when each step toward p=reject is safe.

DMARC enforcement with automatic rollback

Get your domain to p=reject without blocking your own mail

We read your DMARC reports and email you each step once they show it's safe. You approve every step. When a sender you marked as yours sends enough mail to measure and a step starts blocking it, we put the previous policy back.

  1. p=nonereports only
  2. p=quarantineyou approve
  3. p=rejectyou approve

Rollback needs hosted DMARC, on the Starter plan and up. You can try it free for 30 days with no card. Rollback works in the days after each step, and it can't bring back mail a receiver already refused. How rollback works

Create your account

Continue with Google

or

Free for your first domain · No card · Per-source totals kept for life

MSPs can group domains by client.