Most domains still don't enforce DMARC, so anyone can send email that looks like it came from you. Check yours free in about five seconds.
We read your SPF, DKIM and DMARC records and identify your email provider. We don't need passwords or admin access.
We email the exact values for your provider (Google Workspace, Microsoft 365 and others) and confirm when they're live.
We read your daily DMARC reports and move the policy from monitor to quarantine to reject, but only when your real email is passing. That takes about 5–6 weeks.
Done-for-you setup and a guided rollout to full DMARC enforcement.
Paid by bank transfer (ACH or wire) when you get our invoice. No card and no contract.
Ongoing monitoring: a monthly summary of who sends email as your domain, and a warning when something starts failing.
Cancel any time by replying "cancel monitoring".
Not if it's done in stages. We start with monitoring only and tighten the policy after your reports show your legitimate senders (your CRM, invoicing tool and so on) are passing. If they aren't, we tell you exactly what to fix first.
No. You or your web/IT person adds the DNS records. We give you copy-paste values and confirm them from public DNS.
Providers use different selector names, so a public check can't always see DKIM. We confirm it with you during setup.
If we can't get your domain to a working DMARC record, we refund the setup fee. See the terms.