DMARC Report
FAQ

Visit app.dmarcreport.com/signup and choose a plan. The free Core plan requires no credit card. Paid plans include a 30-day free trial. After signup, add your domain and publish a DMARC record with the rua= address we provide. Reports typically start arriving within 24-72 hours.

Log in to your dashboard, click "Add Domain," and enter your domain name. We generate a DMARC record for you to publish in DNS. Once the TXT record is live at _dmarc.yourdomain.com, receiving mail servers begin sending aggregate reports to our platform. Use our DMARC Checker to verify your record is published correctly.

After creating your account: (1) add your domain, (2) publish the DMARC record we generate, (3) wait 24-72 hours for initial reports. The dashboard populates automatically as reports arrive. For Ultimate plan customers, White Glove Onboarding includes a dedicated specialist who configures your domains, reviews your sending sources, and builds an enforcement roadmap. The journey from p=none to p=reject typically spans 9 to 18 months, with each phase requiring a minimum of 90 days of monitoring.

Yes. Every paid plan supports multiple domains. Guard covers 5 domains, Shield covers 10, Defender covers 25, and Ultimate offers custom domain counts. Subdomains are included on Guard and above. MSPs and agencies managing client domains should review our MSP Partner Program for multi-tenant management and white-label reporting.

No. DMARC Report converts raw XML aggregate reports into visual dashboards that classify senders by vendor (Google Workspace, Microsoft 365, SendGrid, and 200+ others). You do not need to read XML or understand SMTP headers. Our DMARC Record Generator handles record creation, and guided workflows walk you through each enforcement phase.

DMARC Report offers five plans: Core (Free, 1 domain, 10K reports/mo), Guard ($25/mo, 5 domains), Shield ($75/mo, 10 domains), Defender ($200/mo, 25 domains), and Ultimate ($345/mo, custom). Annual billing saves approximately 17%. All paid plans include a 30-day free trial with no credit card required. See full pricing details.

Yes. The Core plan is completely free and includes 1 domain, 10,000 monthly report processing, 30 days of data history, and aggregate reports. It is a fully functional monitoring tier, not a time-limited trial. Upgrade anytime if you need more domains, longer data retention, or forensic reports.

Plans differ by domain count, monthly report volume, data retention, and feature access. Key distinctions: Core is free (1 domain, 30 days history). Guard adds subdomains, 6 months history, and email vendor identification. Shield adds MTA-STS/TLS-RPT and email support. Defender adds API access and advanced failure reports. Ultimate adds white glove onboarding, priority support, and 3 years of data history. Compare all plans.

Yes. Every paid plan (Guard, Shield, Defender, Ultimate) includes a 30-day free trial. No credit card is required to start. If you do not upgrade before the trial ends, your account downgrades to the free Core plan and continues working with Core-level limits.

Log in to your dashboard, go to Account Settings, and click "Manage Subscription." You can cancel anytime. Your paid features remain active until the end of the current billing period. After cancellation, your account reverts to the free Core plan. No data is deleted; historical reports remain accessible within Core plan retention limits (30 days).

Yes. Annual billing saves approximately 17% compared to monthly pricing. Guard is $275/year (vs $300 monthly), Shield is $750/year (vs $900), Defender is $2,000/year (vs $2,400), and Ultimate is $3,795/year (vs $4,140). Switch between monthly and annual billing from your Account Settings at any time.

DMARC Report works with every email provider. DMARC is DNS-based, so it functions independently of your email platform. We automatically classify sending sources from 200+ vendors including Google Workspace, Microsoft 365, Amazon SES, SendGrid, Mailchimp, Postmark, Salesforce, HubSpot, and more. If you send email from a domain, we can monitor it.

Start with SPF: publish a TXT record listing all authorized sending IPs and includes (e.g., include:_spf.google.com). Next, enable DKIM signing in your email provider. Finally, publish a DMARC record at _dmarc.yourdomain.com starting with p=none. Monitor aggregate reports for a minimum of 90 days at each phase, fix any authentication failures, then progress to p=quarantine and eventually p=reject. The full journey typically takes 9 to 18 months. See our What is DMARC guide.

Aggregate reports (RUA) are daily XML summaries from receiving servers showing authentication results for all messages from your domain. Forensic reports (RUF) provide per-message failure details for investigating active spoofing. Aggregate reports are the foundation of DMARC monitoring. Forensic reports offer deeper investigation capability but fewer receivers send them. DMARC Report processes both types and presents them as visual dashboards.

Yes. API access is available on Defender and Ultimate plans. The API lets you fetch reports, manage domains, and integrate DMARC data into your existing security dashboards and SIEM tools. Documentation is available in your dashboard after upgrading to an API-enabled plan.

Yes. Parked domains should publish p=reject to prevent impersonation. DMARC Report supports parked domain monitoring on Shield and above. One-click setup publishes a reject policy and monitors for any unauthorized sending attempts against domains that should never originate email.

Most receiving servers send aggregate reports once every 24 hours. After publishing your DMARC record, allow 24-72 hours for the first reports to arrive. DNS propagation and receiver batching schedules affect timing. Large mailbox providers like Google and Microsoft may send multiple reports per day. Your dashboard populates automatically as reports are received.

Yes. DMARC Report sends configurable notification emails. You can set the frequency to daily, weekly, or on specific alert conditions (e.g., new unauthorized sender detected, authentication rate drop). Alert configuration is available in the dashboard notification settings on all paid plans.

DMARC Report automatically classifies sending sources by matching IP addresses and reverse DNS against a database of 200+ known email service providers. When an aggregate report arrives showing traffic from 142.250.x.x, the dashboard identifies it as Google Workspace. Unknown sources are flagged for investigation, helping you discover unauthorized senders quickly.

Data retention varies by plan: Core retains 30 days, Guard retains 6 months, Shield retains 1 year, Defender retains 1 year, and Ultimate retains 3 years. Longer retention enables trend analysis, year-over-year comparisons, and compliance audit trails. Historical data is never deleted within the retention window, even if you downgrade.

Yes. DMARC Report provides a signed 99.99% uptime SLA on Defender and Ultimate plans. The SLA covers dashboard availability, report processing, and API endpoints. Custom SLA terms are available for enterprise agreements. Contact our sales team for details.

Yes. DMARC Report (operated by DuoCircle LLC) maintains SOC 2 Type II certification. The SOC 2 report is available upon request for procurement and compliance review. We also support DPA/NDA agreements, vendor security questionnaires, and SSO/SAML integration for enterprise customers.

All DMARC Report data — including aggregate reports, domain configuration, and account information — is stored exclusively on AWS in the eu-central-1 region (Frankfurt, Germany). No data is stored or replicated outside the EU. This makes DMARC Report a strong fit for organizations subject to GDPR or EU data residency requirements. A Data Processing Addendum (DPA) is available for enterprise customers upon request.

Yes. SSO and SAML authentication are available on Defender and Ultimate plans. This allows enterprise teams to authenticate using their existing identity provider (Okta, Azure AD, Google Workspace, etc.). Role-based access control (RBAC) is available on all paid plans for managing team permissions.

The MSP Partner Program provides multi-tenant DMARC management for Managed Service Providers. Features include per-client dashboards with role-based access, white-label PDF reports, bulk domain onboarding via CSV or API, partner pricing with volume discounts, and a dedicated partner support channel. Learn more at MSP Partner Program.

Yes. PO billing with Net-30 invoicing is available on Defender and Ultimate plans. We also support custom billing arrangements, multi-year agreements, and consolidated invoicing for organizations managing large domain portfolios. Contact our sales team to set up PO billing.