Announcing DMARC consulting: hands-on help for complex email environments

I spend a good part of every day answering support tickets.

Most of the time, the question starts with DMARC but the real situation is more complicated. A company running five different marketing platforms. A transactional system no one documented. A shared domain used by three departments with three different DNS administrators. A legacy CRM that sends email but cannot add DKIM headers.

The monitoring tool surfaces the problem. Fixing it is a different job. It requires someone to sit down, map the sending ecosystem, coordinate with vendors, and sequence the changes carefully. A dashboard cannot do that.

Today, we’re opening that service to everyone.

Why consulting, why now

DMARCTrust started as a monitoring and reporting tool. That is still the core of what we do. But over time it became clear that many customers were not stuck on monitoring. They were stuck on deployment.

The pattern is consistent: an organization deploys DMARC in reporting mode, collects data for a few months, and then nothing happens. Moving to enforcement means touching systems they don’t fully control, getting sign-off from teams they don’t manage, and making DNS changes that could break legitimate email if done in the wrong order. The monitoring tool tells you what needs to happen. It cannot tell you how to make it happen safely.

I kept pointing people in the right direction via support tickets. At some point it made more sense to just do it properly.

What the service covers

We work on DMARC deployment end to end. That starts with an audit of your current setup, identifying every sending source, and building a sequenced plan to move from p=none through to enforcement without disrupting email in the process. We work with whatever monitoring tool you already use. DMARCTrust, another platform, or nothing yet. It does not matter.

The harder cases usually involve multiple ESPs and marketing tools. Modern companies send email from a lot of different systems simultaneously: transactional platforms, marketing tools, CRMs, helpdesks, billing systems. Each one needs to be authenticated, aligned, and accounted for. We map all of them and configure SPF and DKIM correctly for each before touching policy.

DNS configuration is a big part of most engagements. SPF flattening, DKIM key rotation, subdomain policies, wildcard handling. DNS providers vary a lot in how they handle things. We have worked with most of them.

We also do BIMI implementation. Once you reach p=reject, you can get your logo displayed next to your email in Gmail, Apple Mail, and other supported clients. It requires a Verified Mark Certificate, an SVG version of your logo in a specific format, and a DNS record. We handle the whole thing, including guidance on getting the VMC from a Certificate Authority. It is one of the more tangible things you can show for reaching full DMARC enforcement, and most organizations at that stage have not set it up yet.

Rounding it out: Google Postmaster Tools, Microsoft SNDS, Yahoo Sender Hub. We connect your DMARC data to your actual inbox placement and flag anything that needs attention before it becomes a deliverability problem.

Pricing

Consulting services in this space often make you book a call just to find out what something costs. We do not do that.

The consulting page lists fixed prices for each package. A one-time audit starts at €490. A full deployment engagement with hands-on support through to enforcement is €1,490. BIMI implementation is €350 as a standalone or add-on. If your situation does not fit a package, we will scope it and give you a number before any work starts.

Who this is for

Most of our consulting customers fall into a few categories.

Organizations stuck at p=none. They have months of report data, they can see which sources are not authenticating, but they have not moved forward because enforcement feels risky and the path is not obvious. That is exactly the situation consulting is designed for.

Companies with complex sending environments. Multiple ESPs, a mix of transactional and marketing email, acquired companies with their own infrastructure, shared domains across business units. The more moving parts, the harder it is to sequence safely without a guide.

Anyone who wants BIMI. You need full enforcement plus a VMC plus an SVG in the right format. It is a handful of steps across different providers and authorities. We handle it.

Consultants and agencies managing DMARC for clients. We can work with you project by project, or help you build the internal process to handle complex cases without outside help.

How to get started

Fill in the pre-qualification form on the consulting page. Describe what you’re working with and what you’re trying to achieve. We’ll review it and respond within one business day with a recommendation, whether that is one of our packages or a custom scope.

No commitment at that stage. We confirm the price and timeline before anything starts.