Free tool · Monitor
Free DMARC monitoring
Point your DMARC reports at us and see every server that sends mail as your domain: which pass, which fail, and who is spoofing you. We tell you when it's safe to move to quarantine, and email you a digest every week.
Send through Groundmail and it passes DMARC
Groundmail signs every message with your domain's DKIM key and sets a return path on your domain, so its mail lines up with DMARC from the first send. Monitoring is built into every domain in the dashboard. Free for 3,000 emails a month.
How it works
Enter your domain and email and click the link we send you. You get a reporting address just for your domain; add it to the rua= tag of your DMARC record next to any address you already have. With no DMARC record, publish the one we give you: p=none only asks for reports and changes nothing about delivery.
Gmail, Outlook, Yahoo and other receivers send an aggregate report once a day, as gzip or zip XML. We unpack and read each one, group the sending IPs by provider (Google Workspace, Microsoft 365, SendGrid, Mailchimp, HubSpot and more) from reverse DNS and known ranges, and keep the results for 180 days.
From p=none to enforcement, safely
Moving to quarantine or reject while a legitimate sender still fails sends your own mail to spam. The report marks every source as passing, failing, or an unknown sender (possible spoofing), and once every legitimate source has passed DMARC for two weeks it says it's safe to move to p=quarantine.
Every Monday you get a digest: messages, pass rate, new and failing sources, and where you stand on enforcement. Turn it off on the report page or with the unsubscribe link.
Go deeper: SPF, DKIM and DMARC for transactional email
Questions
Is DMARC monitoring really free?
Yes, for any domain, whether or not you send through Groundmail. Up to 10 domains per email address. Groundmail customers get it on every domain's page in the dashboard too.
What is a DMARC aggregate report?
A daily XML file (the rua report) that receivers like Gmail and Outlook send to the address in your DMARC record. It counts the messages they saw from each sending IP and whether SPF, DKIM and DMARC passed. It contains no message content.
Will adding your address change how my mail is delivered?
No. Receivers send reports to every address in rua=, so your existing reports keep arriving, and the policy (p=) stays as it is. Delivery only changes when you change p= yourself.
Do I need to add anything else to DNS?
No. Receivers check that our domain agrees to receive reports for yours (an external reporting record), and we publish that for every domain.
How soon will I see data?
Receivers send reports once a day, so the first ones arrive within 24 to 48 hours of updating your DMARC record. Smaller receivers report less often.
When is it safe to move to p=quarantine?
When every legitimate source of your mail passes DMARC. We say so once every recognised sender has passed for two weeks, so that services that only mail weekly or monthly have shown up. Unknown senders that always fail are spoofers or forwarders; enforcement is what stops them.