DMARCify logoDMARCify
How it works

Signup in minutes. From setup to first report in 24 hours.

Connect a DNS provider for one-click setup, or paste one TXT record yourself. Either way DMARCify flips your domain to verified the moment DNS is correct, then recommends the next safe policy step — and tightens it for you if you opt in.

Start 14-day free trialNew to DMARC? Start here.
  1. 1

    Sign up with an email code

    ~10 seconds
    No password to remember. Drop your email, we send a 6-digit code, you're in. GitHub and Google OAuth also work if your team prefers SSO.
  2. 2

    Add your first domain

    ~15 seconds
    Type a domain (apex like acme.com, or a subdomain like send.acme.com). DMARCify generates a unique per-domain mailbox — that's the address you'll list as your DMARC aggregate-report URI.
  3. 3

    Get the DMARC TXT into your DNS

    ~1 minute manual, instant via provider
    Pick the path that fits. Either connect a DNS provider (Cloudflare, Vercel, Azure DNS, GoDaddy, AWS Route 53, Google Cloud DNS) and DMARCify pushes the record for you with one click — or copy the value we show and paste it as a TXT record at _dmarc.yourdomain.com. Status flips to verified as soon as we see the record live.
  4. 4

    Read, ramp, repeat

    ~2 weeks to p=reject
    Receivers start sending aggregate reports within ~24h. When the data shows every legitimate sender aligning cleanly, DMARCify recommends the next policy step — p=none → p=quarantine → p=reject— and (if you've enabled automatic management) applies it for you. You stay in control; we just stop you having to remember.
The two paths

Five clicks via a provider, or one TXT record by hand

Connect a DNS provider once and DMARCify caches every zone you can reach — then pushes the _dmarc record per domain with one click. No provider? Paste the record we generate yourself; verification still flips automatically.

Path A · Connect a provider
app.dmarcify.dev/dashboard/providers/new
Add provider
Five quick steps. Works the same on desktop and mobile.
Cancel
1Pick a provider
Cloudflare DNS
One API token covers any zone.
Vercel DNS
Personal or team token.
Azure DNS
App registration + client secret.
AWS Route 53
IAM access key + secret.
Google Cloud DNS
Service-account JSON key.
GoDaddy DNS
Production API key + secret pair.
2Get your API credentials
3Paste your credentials
4Choose domains to manage
5Decide what's auto-managed
Path B · Add the TXT yourself
app.dmarcify.dev/dashboard/domains/acme.com?tab=setup

DNS setup

Add this TXT record on acme.com's DNS.

TypeTXT
Name_dmarc.acme.com
Valuev=DMARC1; p=none; rua=mailto:r-01h8zk7tg9@dmarcify.dev; ruf=mailto:f-01h8zk7tg9@dmarcify.dev; fo=1
Verified — first report arrived 4 minutes ago
Under the hood

What happens when a report arrives

The whole pipeline is serverless and globally distributed — no boxes to ssh into, no queues to drain.

  1. 1
    Receiver sends mail to r-XXX@dmarcify.dev
    Daily aggregate report attached as an .xml.gz, .zip or raw .xml. Comes from noreply-dmarc-support@google.com and equivalents.
  2. 2
    Inbound mail pipeline
    Our MX picks up the report and invokes the email handler in single-digit milliseconds — no queue, no cron.
  3. 3
    Parse + validate
    The pipeline decodes the message, handles the attached report, and turns the XML into typed rows. Bad payloads are rejected with a structured error.
  4. 4
    Persisted
    Typed rows are written to our managed datastore, scoped to your organisation. Reads are scoped per-org so one tenant can never see another's data.
  5. 5
    IP enrichment
    Source IPs are looked up against a global IP-resolution table — PTR, ASN, country — so every sender shows up with a name, not just a number.
  6. 6
    Dashboard updated
    Your next page load reads the rolled-up summary from the DO. No batch jobs, no nightly ETL — the data is live the moment the report finishes parsing.
Once you're set up

The dashboard does the rest.

From day one you get the overview table — every monitored domain, current policy, pass rate, last-seen timestamp. Click into a domain for the volume chart, source attribution, and recent reports.

  • Sortable, searchable overview across all domains
  • 30-day volume chart per domain, with pass/fail split
  • Source IP table with provider, ASN, country, header-From
  • Weekly email digest, opt-in per user
app.dmarcify.dev/dashboard
Overview
Domains
5
4 verified · 1 pending
Issues
3
Fixable across your domains
Compliance
63%total
/
88%effective
Across 4 verified domains
Pass rate (30d)
98.7%
Domains
Show issues (3)Export CSV
DomainStatusPolicyRecordsPass rateLast
acme.comverifiedreject38,42099%today
send.acme.comverifiedquarantine14,00297%today
newsletters.acme.comverifiednone5,21088%1d ago
support.acme.comverifiedreject1,212100%2h ago
staging.acme.compendingnone0——

Already using another DMARC tool?

Add DMARCify's rua= alongside your existing one — receivers send to both. Compare what you see. Cut over when you're confident.

rua=mailto:r-XXX@dmarcify.dev,mailto:reports@yourcurrenttool.com
See what you'll save

Ready in 60 seconds.

Add one DNS record and you're done. From €5 per domain per month with a 14-day free trial — card required, no charge until day 15.

Start monitoringSee pricing
One DNS record · 60 seconds to set up