About dmarco

Email authentication is one of the most important — and most overlooked — parts of domain security. Every day, mailbox providers like Google, Microsoft, and Yahoo generate DMARC aggregate reports that reveal exactly who is sending email using your domain. Most organizations never look at them.

dmarco exists to change that. We automatically collect, parse, and analyze DMARC reports — preserving every individual record, not just aggregated summaries. You can see which services and servers send email as your domain, whether those messages pass SPF and DKIM authentication, and what steps you need to take to reach full DMARC enforcement.

Authentication is only half the picture. A message can pass DMARC and still be phishing — sent from a compromised marketing account, forwarded through a mailing list, or carrying links to a lookalike host. So dmarco also includes a header analyzer: paste a single message's headers and get a plain-language read on display-name impersonation, brand mismatch between body and links, lookalike and homograph links, and forwarding that can't be verified. It is one layer of defense rather than a guarantee, and it is free to use without an account.

Our goal is straightforward: make DMARC monitoring and email-safety analysis accessible, transparent, and actionable, whether you manage one domain or hundreds. Your data stays yours, and you don't need email authentication expertise to use it.