Stop anyone sendingemail as your business
We take your domain all the way to enforced DMARC and keep it there — done for you, without you having to learn DMARC or risk breaking a single legitimate email.
Simple, per-account pricing
Per account, not per seat. Talk to us and we'll get you onto the right plan. Public-sector buyer? pay by invoice.
Managed
Done-for-you protection: we walk you safely to full enforcement.
- Everything in Monitor
- We walk you to enforcement (no broken mail)
- Hosted DMARC, so you never edit DNS again
- SPF, DKIM, MTA-STS & TLS-RPT
- 90-day enforcement guarantee
- Priority support
The 90-day enforcement guarantee (Managed and Scale): if we have not walked your domain to enforced DMARC (p=reject) within 90 days of onboarding, for reasons within our control, your subscription is free from day 91 until we have. No small print beyond this sentence.
Not sure yet? Run the free security check first — no signup needed. Want a one-off fix instead of a subscription? See the External Security options.
Since 2024 Google and Yahoo, joined by Microsoft in May 2025, reject or junk mail from bulk senders who fail email authentication. Yet even among the world's busiest domains only about 1 in 11 is properly protected. If yours isn't, criminals can send email as you, and your own mail increasingly lands in spam. We fix both, without breaking a single legitimate email.
We do the work. You get to enforcement.
DMARC done properly is a project, not a checkbox. We run the whole journey for you and keep it healthy afterwards.
Point your reports at us
One small DNS change and your DMARC reports start flowing to us. Nothing to install, no access to your systems.
We find every sender
We ingest the reports and identify every system legitimately sending email as you — and every impostor — and classify them for you.
We get you to enforcement
We fix SPF, DKIM, MTA-STS and TLS-RPT, then step your policy from none → quarantine → reject, with safety gates so legitimate mail never breaks.
We keep it healthy
Ongoing monitoring, a live status portal, monthly reports and a full audit trail. You stay protected without lifting a finger.
What you're actually paying for
Not a report you read yourself — a managed outcome, delivered by us.
Done-for-you enforcement
We walk your domain safely to p=reject — the only setting that actually stops spoofing — with a 90-day guarantee.
Hosted DMARC
We host and manage your DMARC record, so you never have to edit DNS or interpret a report again.
Sender identification
Every sender found, named and classified — so nothing legitimate gets blocked when you tighten policy.
Live portal & reports
A clear status portal, monthly PDF reports and continuous drift detection — proof you stay protected.
MTA-STS, TLS-RPT & BIMI
We set up encrypted-transport enforcement and your verified logo in inboxes, not just the DMARC basics.
A team, not a dashboard
Priority human support and ongoing guidance. We do the work — you get the outcome.
More help as you go up
Managed DMARC is everything, done for you, ongoing.
| Feature | Monitor | Managed | Scale |
|---|---|---|---|
| Visibility & analysis | |||
| Security score (0-100) with section breakdown | check | check | check |
| Spoofability check (can someone send as you?) | check | check | check |
| DMARC aggregate report ingestion & analysis | check | check | check |
| Sender identification & classification | check | check | check |
| Lookalike / typo-squat domain detection | check | check | check |
| Reporting & monitoring | |||
| Live status portal | check | check | check |
| Monthly PDF reports | check | check | check |
| Continuous monitoring & drift detection | check | check | check |
| A record of every change we make, available on request | check | check | check |
| Getting protected (done-for-you) | |||
| We walk you to full enforcement (p=reject) | — | check | check |
| Enforcement safety gates (no broken mail) | — | check | check |
| Hosted DMARC, so you never edit DNS again | — | check | check |
| Done-for-you SPF & DKIM guidance | — | check | check |
| MTA-STS & TLS reporting (TLS-RPT) | — | check | check |
| Enforcement guarantee (90 days) | — | check | check |
| BIMI (your verified logo in inboxes) | — | — | check |
| Management & access | |||
| Multiple domains (up to 5) | — | — | check |
| Unlimited portal users | — | — | check |
| Passwordless sign-in (magic link) | check | check | check |
| Service & support | |||
| Priority human support | — | check | check |
| Ongoing managed service & guidance | — | check | check |
| Dedicated specialist + SLA | — | — | check |
Frequently asked questions
What organisations ask us most often about DMARC, email impersonation and managed protection.
What is DMARC, and why does it matter now?
DMARC is the standard that stops criminals sending email that looks like it comes from your domain, and tells inbox providers what to do with mail that fails. Since 2024, Google and Yahoo (and Microsoft from 2025) require it for bulk senders, so without it your legitimate mail increasingly lands in spam and your domain can be impersonated in phishing and invoice fraud.
Will tightening DMARC break our legitimate email?
That is the main risk if it is done carelessly, and it is exactly what we prevent. We identify every system that sends as you first, make sure each is authenticated, and only move your policy toward enforcement once it is safe, with you approving each step. Done properly, no legitimate email is ever interrupted.
How is this different from a cheap tool or a free DMARC report?
Tools give you a dashboard of reports and leave the work to you: reading them, identifying senders, fixing SPF and DKIM, and deciding when to tighten. We do all of that for you and take your domain all the way to full protection. You are paying for the outcome and the expertise, not a report.
How long does it take to get fully protected?
Most domains reach full enforcement within a few weeks, depending on how many systems send email as you. On the Managed and Scale plans we guarantee enforcement within 90 days of onboarding: if we have not got you there, for reasons within our control, your subscription is free from day 91 until we have. Managed DMARC then keeps you at enforcement with ongoing monitoring.
Do we need any technical knowledge?
No. The point of the managed service is that you do not have to learn DMARC. You publish a couple of records we give you (we guide you, or work with your IT provider), and we handle the rest, with a simple portal showing your live status.
GET TO
ENFORCEMENT
Talk to us and we'll get your domain protected and on its way to full enforcement — without breaking a single legitimate email.
Not ready? Run a free security check first — no signup needed.