RUA ingestion
Reports land in a dedicated mailbox, get decompressed and parsed automatically — nothing to install.
DMARC monitoring, reimagined
See every email
sent in your name.
DMARCmetric turns the unreadable XML of DMARC reports into clear, visual intelligence — with plain-English summaries that tell you exactly what to fix. Stop spoofing, protect deliverability, without a DMARC PhD.
Free forever for 1 domain · No credit card · 30-day history
- Microsoft
- Yahoo
- Comcast
- Mail.ru
- Fastmail
DMARC reports are
unreadable by design.
Receivers send daily aggregate reports as compressed XML — thousands of lines no human should read. Buried inside is the truth about who is sending email as you, and whether attackers are slipping through.
DMARCmetric ingests it all and renders it legible: named senders instead of raw IPs, alignment at a glance, and the one action that moves you safely toward p=reject.
Everything you need to reach enforcement
One clear view of your
entire email identity.
Named senders
Raw IPs resolved to real services — Google, Microsoft 365, Salesforce, Mailchimp — so you know who's who.
SPF & DKIM alignment
Per-source auth and alignment, with the resulting DMARC verdict, surfaced at a glance.
Visual trends
Compliant vs non-compliant volume over time, per domain and per source. Watch authentication improve.
GeoMap
Map sending IPs to their origin and instantly spot traffic from places you never send from.
Policy advisor
Guided none → quarantine → reject with safe percentage ramp-ups — no broken deliverability.
Smart alerts
Get notified the moment a new source appears, failures spike, or someone spoofs your domain.
Free tools
DMARC, SPF & DKIM checkers and generators — validate any record in seconds.
The actual product — not a mockup
See the report
before you sign up.
Every screen below is the real DMARCmetric dashboard. This is what lands the day after you publish one DNS record — named senders, live compliance, and the threats hiding in your traffic.
Sending sources · grouped by provider
Compliance over time
Where your mail comes from
The difference you'll feel daily
XML in.
Plain English out.
Every reporting period, DMARCmetric reads the data and writes you a short, ranked briefing — what changed, how serious it is, and exactly what to do next. No DMARC PhD required.
- Severity-rated: low → critical
- Prioritised, copy-paste fixes
- Included on the free plan
Authentication held at 98.7% aligned. One new unrecognised source (185.220.41.7, Netherlands) sent 3,204 failing messages impersonating your domain — consistent with a spoofing attempt, not a legitimate sender.
Recommended You're safe to advance to p=reject; legitimate mail is fully aligned. This will block the spoofed stream outright.
Safe path to enforcement
Reach p=reject without breaking one real email.
Most domains stall at p=none, afraid enforcement will block legitimate mail. The Policy Advisor removes the guesswork: it reads your live DNS, confirms every real sender is aligned, and walks you up the ramp one safe step at a time.
- Live-DNS aware — reads what you actually publish, not a stale report
- Guided none → quarantine → reject with percentage ramp-ups
- Before/after diff catches an accidental downgrade before you paste
Active protection
We watch your domain
so you don't have to.
DMARCmetric isn't a dashboard you have to remember to open. It reads every reporting period and reaches out the moment something matters — and a clean digest keeps the whole team in the loop without a single login.
- Spoofing detected — someone is sending as you from a source you've never used.
- New sender appeared — a service just started sending on your behalf.
- Failure spike — authentication failures jumped against your baseline.
- Scheduled digests — daily, weekly or monthly, with policy read live from DNS.
Forensic drill-down Included with Starter
See why a message failed — never what it said.
Switch on failure reporting per domain and DMARCmetric captures a sample of the messages that fail authentication: the sending IP, the domains involved, and which checks broke. Exactly what you need to fix a misconfigured sender — and nothing you shouldn't hold.
- Opt-in per domain — off by default
- Subjects, bodies and message-ids are never stored or logged
- Pinpoint the exact source breaking SPF or DKIM
Privacy-first bot defenseCloudflare Turnstile — not Google reCAPTCHA
PII-minimized by designWe store counts and domains, never message content
Tools run in your browserThe free checkers never upload your records
Verified, revocable accessEmail verification and server-side sessions
Live in three minutes
How it works
-
01
Add your domain
Enter the domain you send from. We generate a unique reporting address for it.
-
02
Publish one DNS record
Copy your DMARC record, paste it into DNS. Receivers start sending reports our way.
v=DMARC1; p=none; rua=mailto:rua@… -
03
Watch it become clear
Within a day your first reports arrive — visualised, summarised, and ready to act on.
Teams, agencies & MSPs
Every client and brand,
in one place.
Give each client or business unit its own workspace — separate data, separate billing, its own members and roles. Owners, admins and members see exactly what they should. MSP white-label is on the Scale roadmap — reports carrying your logo, not ours.
- Isolated workspaces per client or brand
- Owner / admin / member roles, per workspace
- MSP white-label — on the Scale roadmap
REST API + webhooks · coming to Scale
POST /v1/domains → add a domain, get its report address webhook dmarc.threat → POST to your endpoint on spoofing
Transparent, published pricing
Pay per domain.
Never per message.
Transparent per-domain pricing — no volume metering, ever. From $4/domain — cheaper at the competitor's own tier sizes, about half the price at comparable fleet sizes. Full pricing details & billing FAQ →
Free
$0/forever
- Real report volume — never sampled
- Plain-English summaries included, every period
- 1 domain · 30-day history
- Named senders · GeoMap · alerts
- All 11 free tools, no login
No credit card · no sales call · no trial clock
Starter
$4/domain /mo
- Unlimited domains
- 1-year history
- Failure forensics (RUF)
- Email alerts & digests
- Priority support
or $40 /domain /yr · card collected at checkout · 14-day free trial
Scale
Custom
- Unlimited domains
- Everything in Starter
- Hand-tailored onboarding & invoicing
- White-label, REST API & SSO — on the Scale roadmap
- Priority support
Before you commit
Questions, answered.
Will turning on DMARC hurt my deliverability?
No — that's the whole point of starting at p=none. In monitoring mode nothing is ever blocked; you only collect data. DMARCmetric recommends advancing to quarantine or reject only once your reports show every legitimate sender is aligned, and even then it ramps by percentage so you watch as you go.
How long does setup take?
About three minutes. Add your domain, copy the one _dmarc TXT record we generate, and paste it into your DNS. Your first reports arrive within a day — parsed, visualized and summarized automatically. Nothing to install.
Do you store the content of my emails?
Never. Aggregate reports carry no message content — only counts, sending IPs and authentication results. The forensic failure-sample view Included with Starter is opt-in per domain and aggressively PII-minimized: subjects, bodies and message-ids are never stored or logged. The free checker tools run entirely in your browser.
Can I move over from another DMARC tool?
Yes. DMARC reporting isn't exclusive — point the rua address at DMARCmetric, or add ours alongside your current one, and reports start flowing immediately. No migration project, no downtime.
What happens when I hit the free-plan limit?
Free covers one domain with real report volume and 30-day history, forever — your oldest domain always stays fully active. Hitting the limit blocks adding another domain; it never switches collection off. Collection pauses in one case only: if a paid subscription ends, every domain except the one you added first stops collecting new reports. Nothing is deleted at that moment, but dashboards return to the Free 30-day window, so anything older than that stops being readable even though it is still stored. Subscribing again reactivates those domains and reveals the stored history instantly. Want unlimited domains, a year of history and failure forensics? Starter is $4 /domain /mo (or $40 /domain /yr) — cheaper at the competitor's own tier sizes, about half the price at comparable fleet sizes. Card collected at checkout; 14-day free trial — cancel before it ends and you won't be charged. Paid renewals are handled transparently by Stripe.
Is it really free, or a trial?
Genuinely free — no credit card, no clock. The free plan is a permanent tier, not a countdown, and it includes plain-English summaries and every no-login tool. Paid plans add scale, not the basics.
34 step-by-step guides for every provider.
From your first DMARC record to reading forensic samples — searchable setup guides, troubleshooting and plain-English explainers. You'll never be stuck on setup.
Know exactly who's
sending as you — today.
Add your domain, publish one record, and let DMARCmetric do the reading.
Start free →