We read every DMARC report and send you one email a week.
Gmail, Microsoft, Yahoo and the other mailbox providers write a daily report about who sent mail as your domain. We collect them at an address that's yours alone, work out who passed and who's new, and mail you Monday's summary with the next change spelled out.
Start with your first domain Run the free check first
First domain free · 12+ months of history · No card
The Monday digest
- Pass rate against last week The first line says whether more of your mail failed this week than last.
- Each new sender, graded A tool a colleague connected, or a stranger forging you: the digest lists it the week it starts, with a pass or fail verdict.
- The next change to make The digest ends on the policy line to publish and the week it is safe to publish it.
- Skip the digest on a quiet week On paid plans you can have us skip a domain's digest on a week where nothing changed.
One TXT record, then wait for Monday
The record proves you own the domain and asks receivers to send us their reports. Your mail carries on as before.
Add the reporting address
We give you the TXT record for _dmarc. If one exists, we
merge our address into it and keep your tags. Or let us
host the record behind one CNAME.
Reports arrive
Receivers send one report a day. The first usually lands within a day or two, and each one goes into the dashboard as it arrives.
Read Monday's digest
It covers every report since the record went in and names the change to make next. On a paid plan, a failing new sender is a same-day email.
The dashboard behind the digest
Each line in the digest links to the reports behind it: 12+ months of per-source history, a trend per sender, and a daily check of your SPF and DKIM records. Every plan, including free.
A reporting address that's yours alone
Each domain gets its own rua address, so its reports land
already sorted. Add it to your DMARC record, or let us host the record.
Every sender identified, with evidence
Every IP in your reports is matched to the service behind it, with the DKIM domain, the SPF domain, reverse DNS, the ASN and the country as the evidence.
Pass and fail over 7, 30 and 90 days
A trend per sender. Date a drop against the week a colleague changed something.
12+ months of report detail
At least 12 months of source-level detail on every plan, and daily totals per source for the life of the account. This August against last August is a question the history can answer.
SPF and DKIM change history
We read your SPF and DKIM records daily and keep each change, so an edit can be dated against the week the pass rate moved.
Upload a report by hand
A report a receiver mailed you before we existed goes into the same dashboard as the ones that arrive at your reporting address.
What Pro adds
The paid plans add alerts between digests and cover more than one domain.
Same-day alerts
We read each report as it lands. The day a new source fails DMARC, or a known sender stops passing, you get an email. A domain sends at most one alert a day, and anything found inside that window rides along with the next one.
One digest across every domain
Every domain in one Monday email, a section each under an account summary. Adding a domain does not add an email to read.
Team members
Invite up to ten people. Each signs in with their own account, as a manager who changes domains and records or a viewer who reads. Billing stays with you.
Hosted records and cleanup
Hosted DMARC, hosted SPF and hosted MTA-STS make each record a control on the page, and DNS cleanup grades your includes and selectors against the reports.
Where to go next
Questions people ask first
What's in an aggregate report?
One row per sending address: how many messages it sent as your domain that day, whether SPF and DKIM passed, and whether the receiver delivered, quarantined or rejected them. No message content and no addresses of the people you mailed.
Will monitoring break my mail?
No. Receivers reject mail only when your policy tells them to, and adding a reporting address does not touch the policy. We read the reports that arrive.
What if I already have a DMARC record?
Keep it. When you add your domain we read the record you publish and hand it back with our reporting address merged in, so your policy and any existing addresses stay as they are. You paste the merged record over the old one.
How fast do I see something?
The first reports arrive a day or two after the record goes in, and the digest goes out on Monday. On a paid plan, an alert arrives the same day a report first names a new source failing.
What's the difference between monitoring and hosting the record?
Monitoring reads the reports. Hosting serves the DMARC record itself from our zone, so the policy moves from a page. Monitoring works either way. Hosting is a paid feature you switch on per domain.
What do you do with my report data?
We parse it and mail it back to you. Aggregate reports name sending IPs and carry no message content. We'll never publish, resell or share your data.
What does it cost?
Free covers your first domain, with 12+ months of report detail and no meter on message volume, and the plan does not expire. Alerts, the consolidated digest and the hosted records are part of Pro and Team. Pro watches 5 domains for $19 a month and Team watches 25 for $79. Every paid feature is free for 14 days, no card.
Add the record today, read Monday's digest
Receivers start reporting within a day or two of the record going in. We read what they send and mail you the summary.
First domain free · 14 days of every paid feature · No card
- Your first domain free, and the plan does not expire
- 12+ months of per-source history on every plan
- Priced by domains watched, so a busier month costs the same
- 14 days of every paid feature, no card