Frequently Asked Questions

DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an email authentication protocol. When you publish a DMARC record, mail providers send aggregate reports to your specified address. Your DMARC Exposed parses and visualises those reports so you can act on them — without needing to be an XML or DNS expert.

Without monitoring, spoofed emails sent using your domain go undetected, SPF and DKIM failures silently drop legitimate mail, and your domain reputation erodes over time.

Account creation takes under five minutes. Add the DNS verification record we give you, and DMARC reports typically start arriving within 24 hours from Google, Microsoft, Yahoo, and other major providers.

No changes to your mail server are required. We receive the aggregate XML reports that mail servers already generate and send. The only change you need to make is adding our reporting address to the rua tag in your existing DMARC DNS record.

Yes. Your DMARC Exposed offers a free trial with no credit card required. At the end of the trial, your account reverts to a limited state unless you upgrade to a paid plan. Start your free trial →

SPF lists the mail servers authorised to send email for your domain. DKIM adds a cryptographic signature so receivers can verify messages haven't been altered. DMARC ties both together, defines a policy for failing messages (none / quarantine / reject), and requests aggregate reports.

Your DMARC Exposed collects and visualises DMARC aggregate reports — showing you SPF and DKIM results for every message sent in your domain's name. Deep dive: how DMARC, SPF & DKIM work →

All major providers participate, including Google (Gmail), Microsoft (Outlook / Hotmail), Yahoo Mail, Apple Mail, Comcast, and hundreds of others. Once your DMARC DNS record includes our rua reporting address, reports flow in automatically — you don't need to do anything else.

DMARC enforcement means setting your policy to quarantine or reject, which tells receiving mail servers what to do with messages that fail authentication. You should move to enforcement only after monitoring your reports long enough to confirm all legitimate senders are passing SPF and DKIM.

Your DMARC Exposed helps you identify senders that are still failing before you tighten your policy — so you don't accidentally block legitimate email.

Yes. You can add multiple domains to your account. Each domain gets its own DMARC reporting address, and you can view reports for all your domains from a single dashboard.

Your DMARC Exposed shows you the sending IP addresses and organisation names behind every failure, making it straightforward to identify the sender. Common fixes:

• SPF failure: add the sender's mail servers to your SPF record
• DKIM failure: configure the email platform to sign outgoing messages with your DKIM key
• Third-party sender: add them as an authorised sender in both SPF and DKIM

The built-in AI feature can explain exactly what each failure means and suggest specific steps to fix it.

All data is stored in Microsoft Azure SQL Database with encryption at rest and in transit (TLS). Passwords are hashed with BCrypt. DMARC reports contain no personally identifiable information — only aggregate authentication pass/fail counts and sending IP addresses.

No. The AI-assisted features in Your DMARC Exposed are entirely opt-in. Your DMARC data is only sent to an AI service when you explicitly trigger one of those features (such as asking for an explanation of a failed report or a DNS record). AI is never invoked during normal use of the dashboard. See our Privacy Policy for full details.

All data is hosted on Microsoft Azure infrastructure. We use Azure SQL Database for structured data and Azure services for processing. No data is shared with third parties for marketing purposes.

Paid plans are billed monthly. You can purchase directly through our site (processed by Stripe) or through the Microsoft Azure Marketplace. No long-term contracts are required — you can cancel any time from your account dashboard.

At the end of the free trial, your account reverts to a limited state. Your data and domain configuration are preserved — you can upgrade to a paid plan at any time to restore full access.

Yes. You can cancel your subscription from your account dashboard at any time. Cancellation takes effect at the end of the current billing period and you retain full access until then. We do not offer prorated refunds for unused portions of a billing period.