Our services

Most DMARC tools show you the problem. We fix it.

Full email authentication setup and ongoing monitoring — handled end to end. You don't touch DNS, read reports, or chase senders. We do all of it.

What's included

Full email authentication, handled end to end

Most providers send you a guide and wait. We log into your DNS, make the changes, monitor the rollout, and send you a health report when it's done.

SPF & DKIM Setup

We identify every service sending email from your domain and configure sender authentication records correctly.

Phased Protection Rollout

We take your policy from none to quarantine to reject over 3–4 weeks, watching for problems at each stage before advancing.

Ongoing Monitoring

After setup, we keep watching. If something drifts — a new sender, a changed record — we catch it and fix it.

From audit to protected in about 4 weeks

Here's what happens after you book.

1

Day 1

Discovery and audit

We scan your domain, identify all senders, and document the current state. You get a summary before any changes are made.

2

Days 2–3

Initial configuration

We add SPF, DKIM, and DMARC records at the monitoring stage. Email flow is unaffected — we're just watching.

3

Days 3–10

Monitor & verify

We analyze authentication reports and confirm all legitimate senders are properly identified.

4

Days 10–17

Move to quarantine

Unauthenticated emails start going to spam. We monitor daily for any issues before advancing.

5

Days 17–24

Full enforcement

Your domain moves to reject. Spoofed emails are blocked outright. We confirm pass rates are healthy.

6

Day 24+

Handover & health report

You receive a written health report. Monitoring begins — included free for 1 month with Standard and Premium.

Simple, transparent pricing

Standard

$2,000/domain

One-time setup fee

What's included

  • Domain audit and sender discovery
  • SPF configuration
  • DKIM setup for all sending services
  • DMARC rollout to full enforcement
  • All DNS changes handled by us
  • Post-setup health report
  • 3–4 week monitored implementation
  • 1 month of free monitoring post-setup

Optional add-ons

  • BIMI setup — $299/domain
  • Ongoing monitoring — $149/domain/month

Multi-domain pricing

  • 2–3 domains: 30% off each
  • 4+ domains: 40% off each
Get Started
Advanced Protection

Premium

$2,500/domain

One-time setup fee

Everything in Standard, plus

  • MTA-STS setup (hosting required — $20/mo)
  • TLS-RPT configuration
  • Compliance-ready report for insurers and auditors

Optional add-ons

  • BIMI setup — $299/domain
  • Ongoing monitoring — $149/domain/month

Multi-domain pricing

  • 2–3 domains: 30% off each
  • 4+ domains: 40% off each
Get Started
Best Value · Save $529

Protected Plan

$3,999/domain

Everything, bundled. No monthly surprises.

What's included

  • Everything in Premium
  • 12 months of monitoring included
  • 12 months of MTA-STS hosting included
  • One flat price — nothing else to add
Get Started

All plans include a free domain audit before any work begins. Monthly monitoring ($149/domain/month) continues after the included period on Standard and Premium.

Compliance

Email authentication is no longer optional.

  • PCI DSS 4.0 now requires DMARC for organizations handling payment data.
  • Google, Yahoo, and Microsoft require authentication for bulk senders.
  • Cyber insurers are increasingly asking for proof of email security controls.

Our Premium and Protected plans include a compliance-ready report documenting your full authentication posture.

We don't just alert you. We fix it.

Email security isn't a one-time setup. New sending services get added, DNS records change, keys expire. Most monitoring tools send you an alert and wait for you to act. We see the problem, fix the record, and send you a summary. You pay for outcomes, not dashboards.

  • Continuous domain health monitoring
  • Monthly written health report
  • Drift detection — SPF, DKIM, and DMARC changes
  • Remediation included — we fix issues, not just flag them
  • 24-hour incident response
  • Adapts as your email setup changes — new senders, new tools, new requirements

$149

per domain / per month

Cancel anytime. Included free for 1 month with Standard and Premium.

Common questions

How long does setup take?

Most domains are fully protected within 3–4 weeks. We follow a staged rollout to avoid disrupting your email flow at any step.

Why does it cost more than just buying a DMARC tool?

DMARC tools show you the problem. We solve it. That includes reading the reports, configuring every sender, making all DNS changes, and handing you a health report — none of which a tool does for you.

We have multiple domains. Do you handle all of them?

Yes. Additional domains are $1,000 each with the same full scope as the first domain. We can run them concurrently or in sequence depending on your preference.

Do you need access to our DNS?

Yes — we need to add and modify DNS records during setup. We'll walk you through granting access securely, and you can revoke it after setup if you prefer.

What happens after setup is complete?

You receive a written health report. Standard and Premium include one month of monitoring free. After that, ongoing monitoring is $149/month per domain. The Protected Plan includes 12 months.

What is MTA-STS and do I need it?

MTA-STS tells other mail servers to only deliver email to yours over encrypted connections. It's included in Premium and Protected. Most businesses benefit from it, especially if you handle sensitive email.

Is this relevant for cyber insurance or compliance audits?

Yes. Premium and Protected include a compliance-ready report documenting your email authentication posture. This is increasingly requested by insurers and auditors.

What if something breaks during rollout?

Nothing should — that's why we use a staged approach. But if a problem appears at any stage, we catch it in the monitoring data before it affects users and fix it before moving to the next phase.

Is this a one-time setup or do I need ongoing monitoring?

The initial setup is one-time, but email security isn't set-and-forget. New sending services get added, DNS records change, and keys expire. Without ongoing monitoring, your protection can silently degrade. Our monitoring catches these changes and fixes them before they become a problem.

Ready to protect your domain?

Book a free domain audit. No commitment, no technical knowledge required. We'll show you exactly where you stand and what it would take to get you protected.

Not sure which plan fits? We'll help you decide on the call.