DMARC Monitoring Pricing for Every Business

We accept all major credit cards (Visa, MasterCard, American Express, Discover) through our secure payment processor, Stripe. We support multiple currencies: USD, EUR, GBP, CAD, and AUD. Your currency is automatically detected at registration based on your location. Depending on your location, VAT or other local taxes may apply on top of the listed prices. EU customers will see VAT added at checkout based on their country. Stripe handles all payment security and compliance.

Add-ons are optional features you can add to any DMARCTrust plan. You can add or remove them at any time through your billing dashboard. Changes take effect immediately, and costs are prorated for the current billing period. This modular approach means you only pay for what you need.

We take security seriously. Each account gets a unique reporting email address with token authentication, so no one else can submit reports to your account. Choose between US or EU data hosting at registration to meet GDPR and data residency requirements. Protect your login with two-factor authentication using Google Authenticator, Microsoft Authenticator, or 1Password. All data is stored with our ISO27001 certified hosting partner with comprehensive audit logs.

DMARCTrust Starter includes 90-day report retention. DMARCTrust Pro includes 180 days, giving you deep historical analysis for trends and compliance. Raw report files are archived securely for compliance purposes.

DMARCTrust was built by members of the early team behind Mailjet, the leading European email service provider. With over a decade of experience managing email infrastructure for thousands of companies, we understand the challenges of email authentication and deliverability. We built DMARCTrust to make enterprise-grade DMARC monitoring accessible to businesses of all sizes.

Create a free account and add your domains. We'll show you how to configure your DMARC DNS records with our unique reporting address. You can also use our free DMARC generator to create the DNS record instantly. The free account lets you set up domains but doesn't include monitoring. Upgrade to activate. This ensures your DNS is properly configured before you start paying.

DMARCTrust Starter includes 2 domains and Pro includes 5 domains. Both plans allow you to add more domains at $12/month each. There's no hard limit. You can add as many domains as you need. The charges are automatically added to your subscription and prorated for the current billing period.

Absolutely. DMARCTrust is built for agencies, MSPs, and consultants managing DMARC for multiple client domains from a single dashboard. Add unlimited domains at $12/month each with no per-client fees or complex tiering. All client domains share one reporting address, one login, and one invoice. You get complete visibility across all domains with per-domain filtering, making it easy to monitor authentication status and generate client reports. Many agencies start with our Pro plan (5 domains) and scale up as their client base grows.

You'll need the ability to add DNS records to your domain (usually through your domain registrar or DNS provider). We provide clear, step-by-step instructions and the exact DMARC record you need to add. See our guides for GoDaddy and Microsoft 365. Once that's done, everything else is automatic.

Yes. Cancel your subscription anytime from your billing dashboard. You'll retain access until the end of your current billing period. No cancellation fees, no questions asked. Your data remains available for 30 days after cancellation if you decide to reactivate.

Yes! DMARCTrust processes both RUA (aggregate) and RUF (forensic) DMARC reports. RUA reports provide comprehensive daily summaries of authentication results across all sending sources, representing 99% of report volume. RUF reports offer detailed per-message failure analysis for rapid threat detection. Note: Most major email providers (Gmail, Yahoo, Microsoft) rarely send forensic reports due to privacy considerations and GDPR compliance requirements. For the vast majority of organizations, RUA reports provide all the necessary insights to monitor and improve email authentication.

Yes. Our platform guides you through every step: from generating your DMARC record to understanding reports and gradually strengthening your policy. Our enforcement playbook details the entire process. Standard email support is included. For hands-on implementation assistance and priority phone support, add our Premium Support option.

Most users start receiving their first DMARC reports within 24 to 48 hours after updating their DNS records. The timing depends on your email volume and how quickly DNS changes propagate. Major email providers like Google and Microsoft typically send aggregate reports daily, so you'll have actionable data very quickly.

Yes! We offer both monthly and annual billing. With annual billing, you get 2 months free, paying for just 10 months upfront. Use the toggle at the top of this page to see annual pricing. Both options are available in multiple currencies (USD, EUR, GBP, CAD, and AUD). You can switch between monthly and annual billing at any time from your billing dashboard, with changes taking effect at your next renewal.

Yes. You can upgrade from Starter to Pro or downgrade at any time through your billing dashboard. Changes take effect immediately, and charges are prorated for the current billing period. When upgrading, you only pay the difference for the remaining days. When downgrading, the credit applies to your next invoice.

Receiver Shield protects your inbound email transport by deploying MTA-STS and monitoring TLS failures with TLS-RPT. Free accounts get DNS audits and setup guidance. Starter includes TLS-RPT analytics so you can see which senders fail encrypted delivery. Pro adds hosted MTA-STS (we serve your policy file, you publish one CNAME) and safe-to-enforce recommendations that tell you when it is safe to switch from testing to enforce mode. Learn more in our MTA-STS guide.

MTA-STS (Mail Transfer Agent Strict Transport Security, RFC 8461) tells sending mail servers they must use encrypted TLS connections when delivering email to your domain. Without it, attackers can downgrade connections to plaintext and intercept messages in transit. DMARCTrust Pro hosts your MTA-STS policy file for you. You publish one CNAME record, and we handle the rest, including a safe rollout from testing to enforce mode. Learn more in our MTA-STS guide.

TLS-RPT (TLS Reporting, RFC 8460) is to encrypted delivery what DMARC is to authentication. When a sending server fails to establish a secure TLS connection with your domain, it sends a TLS-RPT report describing what went wrong. Without monitoring these reports, you have no visibility into delivery failures caused by expired certificates, misconfigured MX hosts, or MTA-STS policy issues. DMARCTrust parses these reports automatically and surfaces actionable insights in your Receiver Shield dashboard, available on Starter and Pro plans.

The SPF Optimizer solves the 10 DNS lookup limit problem defined in RFC 7208. When your domain uses multiple email services (Google Workspace, SendGrid, Mailchimp, HubSpot, etc.), each include: mechanism in your SPF record triggers DNS lookups. Exceed 10 and you get an SPF PermError, which means every email from your domain fails SPF, regardless of which server sent it. The SPF Optimizer resolves your include mechanisms into IP addresses and hosts them in an optimized record on our infrastructure. It runs automatically, detects IP changes from your email providers, and publishes updates without manual intervention. It's a Pro feature because it requires dedicated DNS hosting infrastructure and ongoing automated processing per domain. Read more in our SPF flattening guide.