Skip to content
Groundmail

See who sends as your domain and when it's safe to enforce.

Groundmail reads the DMARC reports Gmail, Outlook and Yahoo send about your domain. You see every sender, which ones pass, and who might be spoofing you, with a digest every Monday.

Free on every plan. Works for domains that don't send through Groundmail too.

Every sender, grouped by provider.

We turn the raw XML into a list you can read. Each source shows its messages, DMARC pass rate, and SPF and DKIM alignment, so you can see a helpdesk or marketing tool that was never set up properly.

  • Passing: nothing to do.
  • Failing: a sender you know that needs SPF or DKIM set up.
  • Unknown sender: usually spoofing or forwarding.

One address in your DMARC record.

Turn monitoring on and you get a report address just for that domain. Add it to the rua= tag and keep any addresses you already have. On Cloudflare, Vercel or GoDaddy, we can write the record for you.

Reports arrive within 24 to 48 hours, and we keep them for 180 days.

Before

_dmarc.example.com  TXT  "v=DMARC1; p=none; rua=mailto:dmarc@example.com"

After

_dmarc.example.com  TXT  "v=DMARC1; p=none; rua=mailto:dmarc@example.com,mailto:k3m9q2xw7hb4npr6@dmarc.groundmail.dev"

Enforce DMARC without blocking your own mail.

Moving to quarantine too early sends your own mail to spam. We watch every legitimate source and tell you when each has passed DMARC for two weeks. Until then the report names what to fix first.

p=none

Only asks for reports. Nothing about your delivery changes.

p=quarantine

Failing mail goes to spam. Safe once every real sender has passed for two weeks.

ready for p=quarantineall known sources passing for 14 days

Where you'll see it, without going looking.

Weekly digest

An email every Monday with last week's volume, pass rate, new or failing sources, and where you stand on enforcement.

In your dashboard

Each domain has a DMARC tab with its sources, pass rate by week and report address.

By API

Turn it on with one call: POST /domains/{id}/dmarc. Read the same summary your dashboard shows, or set it up from your agent.

Any domain

Not sending through us? The free DMARC monitor needs only an email address, for up to 10 domains. Sign up later and your reports move with you.

Questions

Does monitoring change how my mail is delivered?

No. It only reads the reports receivers send. Your delivery changes only if you change your DMARC policy yourself.

What does it cost?

It's free on every plan, and free for domains that don't send through Groundmail.

Do I need to send through Groundmail?

No. Use the free DMARC monitor with just your domain and an email address. If you do send through Groundmail, monitoring is built into every domain.

Will this replace the report address I already use?

No. Add ours next to it in the rua= tag. Receivers send to every address listed.

How soon will I see data?

Receivers send reports once a day, so the first ones arrive within 24 to 48 hours.

What if I don't have a DMARC record yet?

Publish one with p=none and our report address. p=none only asks for reports, so it never affects delivery.

Put your domain on solid ground.

Turn on DMARC monitoring for any domain on your account. It's free on every plan, and it doesn't touch your delivery.