Hosted SPF
0+
Organisations worldwide0+
Fortune 100 and governments0+
Countries served
Traditional SPF flattening is a temporary fix. It breaks, exposes your IPs, and needs constant rework.
SPF Records Break and You Often Don’t Know It
SPF failures go unnoticed until your emails stop landing.
10 DNS lookup limit gets exceeded
SPF returns permerror, and emails fail authentication
New senders add more lookups
Adding a new sender (CRM, marketing tool) can break SPF for all senders instantly
Manual flattening is temporary
Manual SPF flattening becomes outdated every time IPs change
Void lookups add more challenges
Void lookups waste your lookup budget, pushing you closer to failure
What is Hosted SPF?
Hosted SPF is a cloud-based approach to SPF record management. Instead of manually updating DNS, PowerDMARC dynamically maintains your SPF record for you, ensuring it always stays within the 10 lookup limit.
You get reliable SPF record management without constant fixes, re-flattening, or risk of breakage.
Set Up Once, Automate the Rest.
1
Add a single CNAME
Point your domain to PowerDMARC once. No complex SPF record editing.
2
We optimize your SPF automatically
Your SPF record is dynamically maintained to stay within lookup limits.
3
Manage senders from one dashboard
Add or remove services anytime. No DNS changes needed.
4
See exactly what’s happening behind the scenes
Track sending sources, IPs, and SPF activity in real time with built-in SPF Analytics.
Stop SPF from breaking
Why Choose PowerDMARC for SPF
SPF Macros, not just flattening
Advanced SPF analytics and diagnostics
99.995% SLA for reliability at scale
SOC2 Type 2 & ISO 27001 certified infrastructure
SSO/SAML support for enterprise environments
Full authentication stack: DMARC, SPF, DKIM, BIMI, MTA-STS in one platform
Beyond Flattening: SPF Macros
Stay within the 10 DNS lookup limit automatically
Avoid the 512-character record size limit
Hide your authorized IPs from attackers (unlike flattening)
Eliminate void and null lookup issues
Features Built for Mission-Critical Email
Configure once. We manage everything else
Set up your Hosted SPF with a single CNAME, then manage everything from the dashboard, no DNS access needed again!
One-click SPF optimization
Exceeded the lookup limit or added a new sender? Fix it instantly without any manual edits or downtime.
See every sender and IP behind your SPF
Track email volume per source, mechanism, and IP, even those hidden inside nested includes, with built-in SPF Analytics.
Diagnose SPF issues before they break delivery
Instantly detect lookup limit violations, syntax errors, permerrors, and misconfigurations with clear remediation guidance.
Drill down from mechanisms to individual IPs
Switch between high-level SPF mechanisms (include, ip4, ip6) and a flattened IP view to pinpoint exactly who’s sending on your behalf.
Free training and 24/7 support included
Get onboarding sessions and round-the-clock support so your team is never stuck managing SPF issues..
99.995% uptime SLA built for critical domains
Enterprise-grade infrastructure ensures your SPF stays available and reliable at all times.
Enterprise-grade security certifications
SOC2 Type 2 and ISO 27001 certified, meeting strict security and compliance requirements.
Trusted by Governments and Fortune 100 Organizations
Managing SPF used to be a constant headache, especially with lookup limits. Hosted SPF completely removed that risk for us.
Frequently Asked Questions
What is the SPF 10 DNS lookup limit, and why does it matter?
SPF allows a maximum of 10 DNS lookups per query. If your SPF record exceeds this, it returns a permerror, causing email authentication to fail. This often happens when multiple third-party senders are included. Hosted SPF automatically optimizes your record to stay within the limit, ensuring consistent email deliverability.
What is SPF permerror and how do I fix it?
A permerror is a permanent SPF failure caused by issues like exceeding lookup limits, invalid syntax, or broken includes. It results in failed authentication and can lead to emails being rejected or sent to spam. Hosted SPF fixes permerrors automatically by restructuring and maintaining your SPF record in real time.
What is the difference between SPF flattening and SPF Macros?
SPF flattening replaces include mechanisms with static IPs to reduce lookups, but it becomes outdated quickly and exposes your infrastructure. SPF Macros dynamically resolve SPF records in real time, keeping you within lookup limits while adapting to changes automatically, without exposing your IPs.
Why is SPF Macros more secure than traditional flattening?
Flattening exposes your sending IPs publicly, making them easier for attackers to target. SPF Macros keep your infrastructure abstracted while still resolving correctly during authentication. This reduces the attack surface and ensures your SPF remains accurate without manual updates.
How does Hosted SPF work with Google Workspace and Microsoft 365?
Hosted SPF integrates seamlessly with providers like Google Workspace and Microsoft 365. You simply include them as authorized senders in your dashboard, and PowerDMARC manages the underlying SPF record to keep it optimized and compliant.
How long does it take to set up Hosted SPF with PowerDMARC?
Setup typically takes less than 5 minutes. You publish a single CNAME record, and PowerDMARC handles the rest, including optimization, monitoring, and ongoing maintenance.
Can I manage SPF for multiple domains from one account?
Yes. Hosted SPF supports multi-domain management from a single dashboard. You can monitor, update, and optimize SPF records across all your domains without switching environments.
Fix Your SPF Record Today
Stop dealing with lookup limits, broken records, and frequent failures.
