DMARC management
Your emails should reach inboxes, not spam folders
When a client says they never got your invoice, or a warning from Google shows up that doesn't quite make sense, email authentication is usually the reason. It's also what stops someone else from sending email as you.
We handle all of it, from setup to the daily reports, so your real email gets delivered and the fakes get blocked. No reports to read, no DNS records to decipher, no wondering whether it's set up right.
yourdomain.com
Who sent email as you, last 30 days
- 12,840 Passing
Google Workspace
Your team's email
- 3,210 Passing
Marketing platform
Newsletters
- 640 Passing
Billing system
Invoices, fixed on the 9th
- 214 Blocked
Unrecognized server
Pretending to be you
All of your real email is passing. Every fake was blocked.
The short version
Three records that prove your email is really yours
SPF and DKIM do the checking. DMARC ties them together and tells the rest of the internet what to do when a message fails.
Who's allowed to send
A list of the services allowed to send email as your domain.
Proof it wasn't changed
A digital signature showing the message really came from you, untouched.
What to do with fakes
Tells inboxes to deliver, quarantine, or reject mail that fails, and sends you reports.
A DMARC record, up close
v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com; - v=DMARC1
- Marks the record as DMARC.
- p=reject
- What inboxes do with mail that fails.
- rua=
- Where the daily reports get sent.
What this means for you
- Nobody can send convincing fake invoices from your domain
- Your real email lands in inboxes instead of spam
- You can see every service sending email on your behalf
- You meet the rules Google, Yahoo, and Microsoft now enforce
Want the full technical picture? Read your guide to email security and deliverability.
How we get you to enforcement
A staged rollout, not a switch flipped on day one. We monitor first, authenticate every real sender, and only tighten the policy once the reports are clean.
Monitor
Typically 30 to 60 days
Monitoring only, so no mail is ever blocked. Reports reveal every service sending on your behalf, including the ones nobody remembered signing up for, so each one can be authenticated properly.
Quarantine
Once senders are authenticated
Suspicious mail goes to spam while your legitimate senders keep flowing. A safety margin that catches anything missed before mail gets blocked outright.
Reject
60 to 120 days total
Full enforcement. Fake mail claiming to be your domain is blocked before it reaches anyone, and your real email keeps landing exactly where it should.
Why this matters now
The big inboxes stopped asking nicely
Email authentication used to be a nice-to-have. Now unauthenticated mail gets sent to spam or turned away at the door.
Google and Yahoo
Since February 2024, anyone sending more than 5,000 messages a day to Gmail or Yahoo needs SPF, DKIM, and DMARC. Since November 2025, Gmail has been turning away mail that doesn't comply.
Microsoft
Since May 2025, Outlook.com, Hotmail, and Live addresses require the same from senders over 5,000 messages a day, and reject mail that fails.
Even below those numbers, authenticated mail is far more likely to land in the inbox. And auditors increasingly expect it as part of protecting sensitive communications.
Fully managed
What we handle
DMARC isn't set-it-and-forget-it. New tools start sending email all the time, so we keep reviewing the reports and keep every sender authenticated.
Setup
An audit of your current email authentication, then SPF, DKIM, and DMARC configured correctly.
Daily reports
Every report read for you, with authentication failures fixed before they cost you a delivery.
New senders
When your team adds a new tool that sends email, we get it authenticated without disruption.
Spoofing response
Attempts to impersonate your domain investigated, blocked, and explained to you plainly.
DMARC is one layer of our security service. It pairs with email security inside your mailboxes, and works the same on Google Workspace and Microsoft 365.
Frequently asked questions
Want to talk?
Whether you're starting from scratch or trying to figure out why your current setup isn't working, we can help you sort it out.