The DMARC Platform That Also Protects Your Inbox.

We accept all major credit cards (Visa, MasterCard, American Express, Discover) through our secure payment processor, Stripe. We support multiple currencies: USD, EUR, GBP, CAD, and AUD. Your currency is automatically detected at registration based on your location. Depending on your location, VAT or other local taxes may apply on top of the listed prices. EU customers will see VAT added at checkout based on their country. Stripe handles all payment security and compliance.

Add-ons are optional features you can add to any DMARCTrust plan. You can add or remove them at any time through your billing dashboard. Changes take effect immediately, and costs are prorated for the current billing period. This modular approach means you only pay for what you need.

We take security seriously. Each account gets a unique reporting email address with token authentication, so no one else can submit reports to your account. Choose between US or EU data hosting at registration to meet GDPR and data residency requirements. Protect every login with two-factor authentication, a TOTP authenticator app such as Google Authenticator, Microsoft Authenticator, or 1Password, plus single-use backup codes, available on every plan including Free. On shared accounts, the owner can see which teammates have two-factor authentication turned on and send a reminder to anyone who hasn't. All data is stored with our ISO27001 certified hosting partner with comprehensive audit logs.

Yes, on every plan including Free. Protect your login with a TOTP authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, or any compatible app) and keep single-use backup codes in case you lose your device. You can set it up in seconds from your account settings. On shared team accounts, the account owner can see which teammates have 2FA enabled and send a reminder to anyone who hasn't turned it on yet.

The Free plan includes 7-day report retention. DMARCTrust Starter extends this to 90 days. DMARCTrust Pro includes 180 days, so you have more dashboard history for trends, audits, and enforcement work.

DMARCTrust was built by members of the early team behind Mailjet, the leading European email service provider. With over a decade of experience managing email infrastructure for thousands of companies, we understand the challenges of email authentication and deliverability. We built DMARCTrust to make enterprise-grade DMARC monitoring accessible to businesses of all sizes.

Create a free account and monitor 1 domain right away, no credit card required. You get up to 50 aggregate reports per month with 7-day retention and a full dashboard with pass/fail charts. Use our free DMARC generator to create the DNS record and start receiving reports within 24 to 48 hours. Upgrade to Starter or Pro when you need more domains, longer retention, failure reports, or DNS change alerts.

DMARCTrust Starter includes 2 domains and Pro includes 5 domains. Both plans let you add more domains at $12/month each. There is no hard limit: add as many domains as you need. Charges are added to your subscription and prorated for the current billing period.

Yes. Agencies, MSPs, and consultants can manage DMARC for multiple client domains from one dashboard. Add unlimited domains at $12/month each with no per-client fees or complex tiering. Client domains share one reporting address, one login, and one invoice. The dashboard keeps all domains visible, and per-domain filters let you monitor authentication status and generate client reports. Many agencies start with Pro (5 domains) and add domains as their client base grows.

Yes. Paid plans include team seats, so colleagues can work in the same account, each with their own login and their own two-factor authentication. Starter includes 2 teammate seats and Pro includes 5, and the account owner does not count toward the limit. Invite people by email from the Users page in your dashboard; each invitation is a single-use link that expires after 7 days. Team seats are bundled into your plan, so we never bill per user. One person can belong to several accounts and switch between them from the account menu, which is convenient for agencies and consultants who work across client accounts. The Free plan is single-user.

You'll need the ability to add DNS records to your domain (usually through your domain registrar or DNS provider). We provide clear, step-by-step instructions and the exact DMARC record you need to add. See our guides for GoDaddy and Microsoft 365. Once that's done, everything else is automatic.

Yes. Cancel anytime from your billing dashboard. Access continues until the end of the current billing period. There are no cancellation fees. Export any report data you need before paid access ends.

Yes. DMARCTrust processes both RUA (aggregate) and RUF (failure, formerly forensic) DMARC reports. RUA reports summarize authentication results across your sending sources. RUF reports contain per-message failure details when a mailbox provider sends them. Most major email providers rarely send failure reports because of privacy considerations, so aggregate reports are the dataset most teams use to monitor and improve email authentication.

Yes. Our platform guides you through every step: from generating your DMARC record to understanding reports and gradually strengthening your policy. Our enforcement playbook details the entire process. Standard email support is included.

Most users start receiving their first DMARC reports within 24 to 48 hours after updating their DNS records. The timing depends on your email volume and how quickly DNS changes propagate. Major email providers like Google and Microsoft typically send aggregate reports daily, so you'll have actionable data very quickly.

Yes. Monthly and annual billing are both available. With annual billing, you get 2 months free and pay for 10 months upfront. Use the toggle at the top of this page to see annual pricing. Both options are available in multiple currencies (USD, EUR, GBP, CAD, and AUD). You can switch between monthly and annual billing at any time from your billing dashboard, with changes taking effect at your next renewal.

Yes. You can upgrade from Starter to Pro or downgrade at any time through your billing dashboard. Changes take effect immediately, and charges are prorated for the current billing period. When upgrading, you only pay the difference for the remaining days. When downgrading, the credit applies to your next invoice.

Receiver Shield protects your inbound email transport by deploying MTA-STS and monitoring TLS failures with TLS-RPT. Free accounts get DNS audits and setup guidance. Starter includes TLS-RPT analytics so you can see which senders fail encrypted delivery. Pro adds hosted MTA-STS (we serve your policy file, you publish one CNAME) and safe-to-enforce recommendations that tell you when it is safe to switch from testing to enforce mode. See what the Receiver Shield module shows or read our MTA-STS guide.

MTA-STS (Mail Transfer Agent Strict Transport Security, RFC 8461) tells sending mail servers they must use encrypted TLS connections when delivering email to your domain. Without it, attackers can downgrade connections to plaintext and intercept messages in transit. DMARCTrust Pro hosts your MTA-STS policy file for you. You publish one CNAME record, and we handle the rest, including a safe rollout from testing to enforce mode. Learn more in our MTA-STS guide.

TLS-RPT (TLS Reporting, RFC 8460) is to encrypted delivery what DMARC is to authentication. When a sending server fails to establish a secure TLS connection with your domain, it sends a TLS-RPT report describing what went wrong. Without monitoring these reports, you have no visibility into delivery failures caused by expired certificates, misconfigured MX hosts, or MTA-STS policy issues. DMARCTrust parses these reports automatically and surfaces actionable insights in your Receiver Shield dashboard, available on Starter and Pro plans.

The SPF Optimizer solves the 10 DNS lookup limit problem defined in RFC 7208. When your domain uses multiple email services (Google Workspace, SendGrid, Mailchimp, HubSpot, etc.), each include: mechanism in your SPF record triggers DNS lookups. Exceed 10 and you get an SPF PermError, which means every email from your domain fails SPF, regardless of which server sent it. The SPF Optimizer resolves your include mechanisms into IP addresses and hosts them in an optimized record on our infrastructure. It runs automatically, detects IP changes from your email providers, and publishes updates without manual intervention. It's a Pro feature because it requires dedicated DNS hosting infrastructure and ongoing automated processing per domain. See what the SPF Optimizer module looks like or read our SPF flattening guide.

DMARCTrust publishes every price on this page. Starter is $19/month (2 domains, unlimited reports) and Pro is $49/month (5 domains, SPF Optimizer, MTA-STS hosting, TLS-RPT analytics), with extra domains at $12/month each. Annual billing gives you 2 months free. There are no sales calls, custom quotes, or minimum commitments.

DMARCTrust pricing is based on active domain count, not employee count or message volume. A 2,000-employee company managing 5 brand domains fits the Pro plan at $49/month (5 domains included). If you manage more, for example 15 domains across acquisitions or regional brands, add the extra 10 domains at $12/month each. Annual billing reduces the effective monthly cost. See the price per domain for 5 to 50 domains.

Because package names, limits, and quoted terms change, we don't republish competitor pricing here. For comparison, check the active-domain allowance, message-volume metering, and support or implementation terms. DMARCTrust keeps pricing public: $19/month for Starter, $49/month for Pro, extra domains at $12/month each, team seats included at no per-user charge, and no message-volume metering on paid plans. For feature-level trade-offs, see our DMARC vendor comparison guide.