Our services
Most DMARC tools show you the problem. We fix it.
Full email authentication setup and ongoing monitoring, handled end to end. You don't touch DNS, read reports, or chase senders. We do all of it.
What's included
Full email authentication, handled end to end
Most providers send you a guide and wait. We log into your DNS, make the changes, monitor the rollout, and send you a health report when it's done.
SPF & DKIM Setup
We identify every service sending email from your domain and configure sender authentication records correctly.
Phased Protection Rollout
We take your policy from none to quarantine to reject over 60 days, with two weeks of monitoring at each stage before advancing.
Ongoing Monitoring
After setup, we keep watching. If something drifts (a new sender, a changed record), we catch it and fix it.
Full protection in 60 days
A staged rollout with two weeks of monitoring at every phase. If you're not fully protected in 60 days, we keep working until you are, at no extra cost.
Day 1
Discovery and audit
We scan your domain, identify all senders, and document the current state. You get a summary before any changes are made.
Weeks 1–2
Monitoring phase
We add SPF, DKIM, and DMARC at the monitoring stage and watch for two full weeks. Email flow is unaffected. We confirm every legitimate sender is correctly identified.
Weeks 3–4
Quarantine phase
Unauthenticated email starts going to spam. We monitor for two weeks, checking pass rates before advancing.
Weeks 5–6
Enforcement phase
Your domain moves to reject. Spoofed email is blocked outright. We monitor for two weeks to confirm pass rates stay healthy.
Weeks 7–8
Handover & health report
You receive a written health report and your domain is fully protected. If anything still needs attention, we keep working at no extra cost until it's done.
Simple, transparent pricing
Standard
$2,000/domain
One-time setup fee
What's included
- Domain audit and sender discovery
- SPF configuration
- DKIM setup for all sending services
- DMARC rollout to full enforcement
- All DNS changes handled by us
- Post-setup health report
- 60-day monitored implementation
- 1 month of free monitoring post-setup
Optional add-ons
- BIMI setup: $299/domain
- Ongoing monitoring: $149/domain/month
Multi-domain pricing
- 2–3 domains: 30% off each
- 4+ domains: 40% off each
Premium
$2,500/domain
One-time setup fee
Everything in Standard, plus
- MTA-STS setup (hosting required, $20/mo)
- TLS-RPT configuration
Optional add-ons
- BIMI setup: $299/domain
- Ongoing monitoring: $149/domain/month
Multi-domain pricing
- 2–3 domains: 30% off each
- 4+ domains: 40% off each
Protected Plan
$3,999/domain
Everything, bundled. No monthly surprises.
What's included
- Everything in Premium
- 12 months of monitoring included
- 12 months of MTA-STS hosting included
- One flat price, nothing else to add
All plans include a free domain audit before any work begins. Monthly monitoring ($149/domain/month) continues after the included period on Standard and Premium.
Compliance
Email authentication is no longer optional.
- PCI DSS 4.0 now requires DMARC for organizations handling payment data.
- Google, Yahoo, and Microsoft require authentication for bulk senders.
- Cyber insurers are increasingly asking for proof of email security controls.
Every plan ends with a written health report documenting your full authentication posture, the proof insurers and auditors are starting to ask for.
We don't just alert you. We fix it.
Email security isn't a one-time setup. New sending services get added, DNS records change, keys expire. Most monitoring tools send you an alert and wait for you to act. We see the problem, fix the record, and send you a summary. You pay for outcomes, not dashboards.
- Continuous domain health monitoring
- Monthly written health report
- Drift detection for SPF, DKIM, and DMARC changes
- Remediation included: we fix issues, not just flag them
- 24-hour incident response
- Adapts as your email setup changes: new senders, new tools, new requirements
$149
per domain / per month
Cancel anytime. Included free for 1 month with Standard and Premium.
Common questions
How long does setup take?
Full protection takes 60 days, with two weeks of monitoring at each phase of the rollout so nothing disrupts your email flow. If you're not fully protected by day 60, we keep working until you are at no extra cost.
Why does it cost more than just buying a DMARC tool?
DMARC tools show you the problem. We solve it. That includes reading the reports, configuring every sender, making all DNS changes, and handing you a health report, none of which a tool does for you.
We have multiple domains. Do you handle all of them?
Yes. Additional domains get the same full scope as the first and are added at a discounted price. You can see the exact cost in the pricing section above.
Do you need access to our DNS?
Yes. We need to add and modify DNS records during setup. We'll walk you through granting access securely, and you can revoke it after setup if you prefer.
What happens after setup is complete?
You receive a written health report. Standard and Premium include one month of monitoring free. After that, ongoing monitoring is $149/month per domain. The Protected Plan includes 12 months.
What is MTA-STS and do I need it?
MTA-STS tells other mail servers to only deliver email to yours over encrypted connections. It's included in Premium and Protected. Most businesses benefit from it, especially if you handle sensitive email.
What if something breaks during rollout?
Nothing should. That's why we use a staged approach. But if a problem appears at any stage, we catch it in the monitoring data before it affects users and fix it before moving to the next phase.
Is this a one-time setup or do I need ongoing monitoring?
The initial setup is one-time, but email security isn't set-and-forget. New sending services get added, DNS records change, and keys expire. Without ongoing monitoring, your protection can silently degrade. Our monitoring catches these changes and fixes them before they become a problem.
Ready to protect your domain?
Book a free domain audit. No commitment, no technical knowledge required. We'll show you exactly where you stand and what it would take to get you protected.
Not sure which plan fits? We'll help you decide on the call.