Beta testing is now live. We are looking for beta testers - use the contact form to sign up.
DMARCHubDMARCHub
DMARCHub

Know who's sending email as your domain.

DMARCHub turns DMARC reports into a clear view of who is sending mail as you. Block the spoofers. Trust your inbox.

Aggregate reports

Daily summaries of every IP that sent mail claiming to be from your domain, with DKIM/SPF results.

Forensic reports (privacy-scrubbed)

Per-message failure detail without storing message body, subject, or recipient local-parts.

Hosted MTA-STS

We publish and rotate your MTA-STS policy for you so receivers can encrypt mail to you over verified TLS.

How it works

  1. 1

    Add your domain

    Verify ownership with a single DNS TXT record. We publish a per-customer DMARC policy under our hosted address.

  2. 2

    Reports start flowing

    Receivers send aggregate (RUA) and forensic (RUF) reports to your dedicated reporting mailbox. We parse, normalise, and store them.

  3. 3

    See what is going on

    A clean dashboard for who is sending email as your domain, what is failing alignment, and what to tighten next.

What is DMARC?

DMARC is an email authentication standard. It lets you see every system sending email as your domain and tells receiving servers what to do with messages that fail authentication. Published as a single DNS record, it builds on SPF and DKIM and reports back on who is using your domain - legitimate senders and impostors alike.

Read our guide to DMARC →

Common questions

What is DMARC?

DMARC is an email authentication standard that lets you see who is sending email using your domain and tells receiving mail servers to block messages that fail authentication. It builds on SPF and DKIM and is published as a single DNS record.

Do I need DMARC?

If you send email from your own domain, yes. Since February 2024 Google and Yahoo require DMARC for anyone sending bulk email, and without it anyone can put your domain in the From line of a message.

What does DMARCHub do?

DMARCHub collects your DMARC reports from every mail receiver, turns the raw XML into a clear dashboard, hosts your MTA-STS policy, and alerts you when your DMARC record changes.

Where is my data stored?

All data is hosted in Microsoft Azure UK South and stays in the UK. Forensic report content is privacy-scrubbed at the point of ingest, so message bodies and recipients are never stored.

Want a closer look?

DMARCHub is in beta. We are onboarding a small group of UK organisations to help us shape the platform before public launch. Get in touch and we will be back to you within a business day.

Sign up for beta