PowerDMARC’s DMARC monitoring service shows you every service sending email under your domain name, whether each one passes authentication, and who’s spoofing you, starting free.
0+
Organisations worldwide0+
Trusted by 2,000+ MSPs0+
countries servedDMARC monitoring is the process of collecting and reading DMARC reports that mail providers send back about messages claiming to be from your domain, without changing how any of that mail gets delivered. Every major inbox provider that receives DMARC-protected mail, including Google, Microsoft, and Yahoo, sends a daily aggregate report back to the address you specify in your DMARC record. On their own, those reports are dense XML files. A DMARC monitoring service parses them into a dashboard so you can see, sender by sender, who is sending mail as your domain and whether each one is passing SPF and DKIM.
This is the step that comes before enforcement. You can’t safely block or quarantine unauthorized mail until you know which of your own tools, vendors, and marketing platforms are sending legitimate mail on your behalf. Monitoring is how you build that list first.
Getting from zero visibility to a working monitoring setup takes four steps:
Publish a record for your domain with PowerDMARC's rua= reporting address included.
These are sent back to the address automatically, no extra setup required on your end.
Into an easy-to-read dashboard, grouping results by sending source instead of raw XML.
Confirming the senders you recognize and flagging anything you don't.
Every sending source's pass or fail status in one view, instead of raw XML you'd otherwise have to parse by hand. This is the core of the free plan and stays with you at every tier.
Know which services send mail as your domain and whether each one authenticates, refreshed daily as new reports come in from Google, Microsoft, Yahoo, and other participating providers.
Failure-level detail when a message doesn't authenticate, giving you more context than an aggregate report alone. PowerDMARC also offers PGP encryption for failure reports, in order to mask any sensitive information from unintended exposure.
Upload your logo, get a single DNS string to publish, and build toward brand-visible email in supporting inboxes once your domain is enforcing DMARC. Included on the free plan alongside hosted DMARC.
A set of free checkers and generators covering DMARC, SPF, DKIM, BIMI, MTA-STS, and DNSSEC, each linking out to its own dedicated tool.
DMARC Monitoring mode is when your DMARC record is published with a policy of p=none. It tells receiving mail providers to keep delivering mail exactly as they would without DMARC in place, while still sending you reports on what passed and what didn’t. Nothing gets blocked or quarantined at this stage.
This is the safest way to start. You get full visibility into your sending sources with zero deliverability risk, which matters if you haven’t yet confirmed every legitimate service sending mail on your behalf. Once your reports show consistent, clean results, moving to p=quarantine or p=reject becomes a much lower-risk decision. We recommend starting with p=none for exactly this reason.
A message goes out claiming your domain
Google, Microsoft & others send DMARC reports daily
p=none takes no action — mail is delivered either way
Our paid plans open up everything you need to scale and eventually enforce:
Affordable yet effective: Our paid tier starts at just $8 per month, making it suitable for businesses on a tighter budget.
More domains and users: Basic plans start at 5 active domains and 2 platform users, growing further on Enterprise.
A full year of report history: Instead of 10 days, so you can track authentication trends over time and not just a rolling snapshot.
Hosted SPF, DKIM, MTA-STS, TLS-RPT: Added on top of the hosted DMARC and BIMI already included free.
Built-in AI Agent: Get instant answers on email authentication, domain security, and policy guidance directly in your dashboard.
Phone and email support: When you want a real human person to talk through your setup.
Our free plan is a real, ongoing tier, not a trial that expires. It includes:
Free tools built around a single checker leave you to figure out the next step yourself. PowerDMARC's monitoring dashboard is built on the same platform you'd use to move from p=none to full enforcement, so you're not migrating tools later.
Our platform converts both RUA and RUF reports into human-readable dashboards, where competing platforms often limit you to aggregate data only.
Brand-visible email is part of the free tier as well as higher tiers, not an upsell. Make your brand stand out in supported inboxes from day one with just a few clicks.
Multi-domain support, hosted SPF, hosted DKIM, MTA-STS, TLS-RPT, and AI-assisted policy guidance are available as your needs grow, without switching providers.
