DMARC monitoring built for agencies running many domains.
See every client's email authentication in one place. Ingest DMARC reports, spot spoofing and misconfiguration, and move each domain to full enforcement — without paying per-domain for a closed platform.
Everything you need to run DMARC for a portfolio of clients.
One workspace, unlimited domains, no per-domain licensing. Purpose-built for the way agencies actually work.
Unlimited domains & clients
Group domains by client, tag them, and give each account its own view. Add the 43rd domain at the same price as the first — zero.
Automatic report ingestion
Point a mailbox at the tool. Aggregate and forensic XML reports are fetched, parsed, and de-duplicated on a schedule — no manual uploads.
Spoofing & threat detection
Unauthenticated sources are surfaced the moment they appear, with the sending IP, volume, and geography so you can act before a client does.
Guided path to enforcement
Each domain shows exactly what stands between p=none and p=reject, with source-by-source alignment for SPF and DKIM.
White-label client reports
Export a clean monthly summary per domain — your logo, your colours — that a non-technical client can actually read.
Self-hosted, your data
Runs as a single container with PostgreSQL, on Docker Compose or Kubernetes. Client report data never leaves your infrastructure — a real answer for data-residency clauses.
From raw XML to enforced in three steps.
The pipeline runs continuously in the background. You just watch compliance climb.
Sync the mailbox
Publish a DMARC record pointing report addresses at your inbox, then connect that mailbox once. Reports arrive automatically from every mailbox provider.
Parse & align
The worker unpacks each report, resolves sending sources, and checks SPF and DKIM alignment — grouping thousands of rows into a handful of clear signals.
Monitor & enforce
Every domain gets a live compliance score, a threat feed, and a recommended next policy change. Tighten from none to reject with confidence.
Running in under five minutes.
One container for the whole application, plus PostgreSQL. Download the compose file, generate a key, and open the dashboard. Prerequisites are Docker and a mailbox for report delivery.
- Console and report ingestion in one container
- Split them, or bring your own PostgreSQL, when you need to
- Helm chart for Kubernetes, the same settings either way
The same insight, without per-domain pricing.
Hosted DMARC platforms charge by the domain and by the message volume — which punishes exactly the agencies with the most to monitor.
Comparison reflects the common commercial model of hosted DMARC tools. Named products are trademarks of their respective owners and are not affiliated with this project.
Questions, answered plainly.
What is DMARC, in one sentence?
DMARC is an email standard that lets a domain owner tell receiving servers what to do with mail that fails authentication — monitor it, quarantine it, or reject it — and get reports on who is sending as their domain. It's how you stop others from spoofing your clients' brands.
Why run it myself instead of a hosted tool?
Cost and control. Hosted platforms bill per domain and per message, so an agency with dozens of clients pays the most. Self-hosting removes that ceiling, keeps sensitive report data on your own infrastructure, and lets you customise the tool to your workflow.
How many domains can it handle?
There is no built-in limit. Domains are grouped by client, and the background worker scales with your database — the same install comfortably serves a handful of domains or several hundred across many clients.
What do I need to run it?
For production, Docker and a PostgreSQL database (both included in the compose file) plus a mailbox that receives your DMARC reports. For local development, .NET SDK 10 and Node.js 22+ give you hot reload on both the API and the frontend.
Is it really free?
Yes. The project is released under the Apache-2.0 licence — free to use, modify, and deploy commercially. You pay only for the infrastructure you run it on.