Every capability an agency needs to run DMARC at scale.
From automatic report ingestion to white-label reporting — grouped into the four things you do all day: monitor, investigate, enforce, and report.
Monitor the portfolio
A single pane of glass across every client domain, refreshed as new reports arrive.
Multi-tenant workspace
Organise domains under clients, with per-client access so a colleague sees only the accounts they manage.
Live compliance scoring
Each domain carries a rolling DMARC pass rate, so a slip shows up before it becomes a deliverability problem.
Portfolio overview
Sort and filter every domain by policy, compliance, or open threats to triage where your attention goes first.
Trend history
Volume and alignment plotted over time, so you can prove progress to a client month over month.
Ingest & investigate
Turn a flood of raw XML into a short list of things worth looking at.
Scheduled mailbox sync
The background worker checks connected mailboxes on a schedule, with health and sync-run monitoring endpoints.
Aggregate & forensic reports
Both RUA and RUF report types are parsed and normalised into a consistent model you can query.
Source identification
Sending IPs are resolved to a recognisable service so you know whether it's your ESP or an impersonator.
Threat feed
Unauthenticated senders are flagged with volume and geography so you can respond before a client notices.
Move to enforcement
Take every domain from p=none to p=reject without breaking legitimate mail.
SPF & DKIM alignment
See exactly which sources pass or fail alignment, so you know what to fix before tightening policy.
Policy recommendations
Each domain shows the next safe step and what's still blocking full enforcement.
Record inspection
Review the published DMARC, SPF, and DKIM records side by side with what the reports actually show.
Change confidence
Percentages back every recommendation, so a policy change is a decision you can defend to a client.
Report & operate
Show clients the value, and run the platform on your own terms.
White-label exports
Per-domain monthly summaries in your own branding that a non-technical stakeholder can understand.
Single-image deployment
One container runs the console and ingestion together, or split them when you need to. PostgreSQL is the only dependency, and a Helm chart takes the same settings to Kubernetes.
Operational endpoints
Mailbox health and sync-run history are exposed as API endpoints for your own dashboards and alerts.
Your data, your rules
Everything runs on your infrastructure under Apache-2.0 — no vendor cloud, no per-domain licence.
A stack you can actually maintain.
ASP.NET Core + Carter
A single .NET service runs as either the API or the background worker, selected by APP_MODE.
React + Vite
A fast SPA frontend, built to static assets and served from the same container's wwwroot.
PostgreSQL
One database for report storage across local development and container deployments alike.
See it running in five minutes.
Clone the repository, run docker compose, and connect your first mailbox.