DMARC for multiple domains
DMARC management for every domain your company owns.
DMARC monitoring for multiple domains, built for IT teams that run 5 to 50 brand, regional, product, and parked domains. One reporting address for all of them, sources and alignment per domain, hourly DNS change alerts, and a price per domain you can put in a budget line.
- No credit card
- Live in under a minute
- We never touch your mailbox
- Built by ex-Mailjet engineers
Built by Marc Lelu, ex-Mailjet deliverability engineer. Last updated September 26, 2026.
Why DMARC gets harder with every domain you add
One domain is a DNS change and a few weeks of reading reports. Twenty domains is an inventory problem: each one has its own senders, its own policy, and its own reports, and none of them tells you about the others.
Senders are scattered
Marketing sends from the brand domain through one platform, HR sends from a regional domain through another, and a product team signed up for a helpdesk tool on a third. Each domain's reports list only that domain's senders, so nobody sees the whole picture.
Parked domains need p=reject too
A domain that sends no mail is still a domain someone can spoof. Publish p=reject and v=spf1 -all, send its reports to the same place as the others, and check that nobody is sending as it.
Alignment is per domain
DMARC checks SPF and DKIM against the domain in the From header. A DKIM key set up for one brand does not align for a sister brand on a different registered domain. Each domain reaches enforcement on its own schedule.
Automated DMARC reporting for multiple domains
Every domain in the account gets the same treatment. The free plan covers 1 domain; the rest of this list is on paid plans unless it says otherwise.
One reporting address for all domains
Your account has a single rua address. Put it in each domain's DMARC record and reports are filed under the domain they describe. The external-destination authorization record is already published on our side. Free plan included.
Aggregate reports parsed per domain
Each domain gets its own pass rates, SPF and DKIM alignment trend, and report list, parsed within minutes of arrival. Free plan included for 1 domain.
Source insights
Sending IPs grouped by provider with their alignment, so you can tell the helpdesk tool that needs a DKIM key from the spoofer that needs p=reject.
Hourly DNS monitoring and alerts
DMARC, SPF, BIMI, TLS-RPT, and MTA-STS records are checked hourly on every domain. A change must still be there on the following check before it becomes an email alert, filtered by severity and record type.
Failure reports and TLS-RPT
Failure (RUF) samples from the receivers that send them, and TLS-RPT reports showing which senders could not deliver to you over encrypted SMTP.
SPF Optimizer and hosted MTA-STS
Pro only. The SPF Optimizer keeps busy SPF records under the 10-lookup limit, and hosted MTA-STS serves your policy without a web server.
DMARC pricing per domain
Pro is $49 per month with 5 domains included. Each domain after that is $12 per month, and each one adds a teammate seat. The prices are published, so you do not need a quote or a sales call.
| Domains | On Pro | Per month | Per domain | Teammate seats |
|---|---|---|---|---|
| 5 | Pro | $49 | $9.80 | 5 |
| 10 | Pro + 5 × $12 | $109 | $10.90 | 10 |
| 25 | Pro + 20 × $12 | $289 | $11.56 | 25 |
| 50 | Pro + 45 × $12 | $589 | $11.78 | 50 |
Prices in USD, billed monthly. Annual billing gives 2 months free. Local taxes such as VAT may apply.
Below 5 domains, Starter is cheaper: $19 per month for 2 domains and 2 teammates, with the same extra-domain price. From 5 domains up, Pro costs $6 less per month than Starter plus extra domains and adds 180-day retention, the SPF Optimizer, and hosted MTA-STS. See every plan on the pricing page.
Separate logins for the mail team
Invite colleagues by email instead of sharing one password. Starter includes 2 teammates, Pro includes 5, and every extra domain adds one seat, so an account with 25 domains on Pro has 25 seats. Teammates see every domain in the account. Billing, invitations, and seat management stay with the account owner.
Report history long enough for a rollout
Moving 20 domains from p=none to p=reject takes months. Retention sets how far back the per-domain report detail goes.
| Plan | Detail retention |
|---|---|
| Free | 7 days + 2-day grace |
| Starter | 90 days + 2-day grace |
| Pro | 180 days + 2-day grace |
API and CSV export for your own tooling
On Starter and Pro, a JSON API authenticated with API keys lets you add and activate domains from a script, trigger a DNS re-check, and pull per-domain stats, sending sources, DNS records, and reports into your SIEM or monitoring. The dashboard exports the domain list, reports, and processing logs as CSV. Read the API reference.
Frequently asked questions
- Do I need a separate reporting address for each domain?
- No. Your account has one reporting address, and every domain you add uses it in the rua tag of its DMARC record. Reports are filed under the domain they describe. Because the address sits on a different domain from yours, receivers check for an external-destination authorization record (RFC 7489 §7.1). We publish a wildcard record covering every domain, so there is nothing extra to add to your DNS.
- How much does DMARC monitoring cost for 25 domains?
- On Pro, $49 per month covers 5 domains, and each extra domain is $12 per month. 25 domains is $49 + 20 × $12 = $289 per month, or $11.56 per domain. Annual billing gives 2 months free. Local taxes such as VAT may apply.
- Should parked domains get a DMARC record?
- Yes. A domain that sends no mail should publish p=reject and an SPF record of v=spf1 -all, so receivers reject anything claiming to come from it. Point its rua tag at your reporting address and the aggregate reports show whether anyone is still sending as that domain. In DMARCTrust a parked domain counts as a domain on your plan like any other.
- Can my colleagues log in with their own accounts?
- Yes, on paid plans. Starter includes 2 teammates and Pro includes 5, and each extra domain you buy adds one more seat. Teammates sign in with their own email address and see every domain in the account. Billing and team management stay with the account owner.
- Can I add domains from a script instead of the dashboard?
- Yes. The JSON API, available on Starter and Pro, can add a domain, activate or deactivate it, trigger a DNS re-check, and read per-domain stats, sending sources, DNS records, and reports. It uses the same plan limits as the dashboard, so an activation beyond your domain count is refused with an error instead of billed.
Put every domain behind one reporting address
Start with 1 domain for free, no credit card. Add the rest when you move to a paid plan.
One week on DMARCTrust
Our customers' numbers, not industry averages.
-
2.6M
emails analyzed in week 38
-
99%
of customer mail passes DMARC
-
96%
of sending sources need nothing from you
-
1
source left to fix on a typical domain
Paid customer domains, week 38 of 2026.