Know who's sending email as your domain.
DMARCHub turns DMARC reports into a clear view of who is sending mail as you. Block the spoofers. Trust your inbox.
- UK data residency
- Aggregate & forensic reports
- Free to start
Dashboard
- Azure UK South
- Encryption at rest & in transit
- SSO with Entra and Google Workspace
- Aggregate & forensic reports
Free check
Check your domain's DMARC.
Enter your domain and we will look up its DMARC record and tell you where you stand - whether reports are being collected and whether spoofed mail is being blocked.
We look up your public DMARC record. Nothing is stored, and you do not need an account.
Capabilities
What DMARCHub gives you.
The DMARC heavy lifting, done quietly - parsed reports, privacy-scrubbed forensics, and hosted policy.
Aggregate reports
Daily summaries of every IP that sent mail claiming to be from your domain, with DKIM/SPF results.
Forensic reports (privacy-scrubbed)
Per-message failure detail without storing message body, subject, or recipient local-parts.
Hosted MTA-STS
We publish and rotate your MTA-STS policy for you so receivers can encrypt mail to you over verified TLS.
How it works
From DNS record to clear reporting, in three steps.
Add your domain
Verify ownership with a single DNS TXT record. We publish a per-customer DMARC policy under our hosted address.
Reports start flowing
Receivers send aggregate (RUA) and forensic (RUF) reports to your dedicated reporting mailbox. We parse, normalise, and store them.
See what is going on
A clean dashboard for who is sending email as your domain, what is failing alignment, and what to tighten next.
DMARC basics
What is DMARC?
DMARC is an email authentication standard. It lets you see every system sending email as your domain and tells receiving servers what to do with messages that fail authentication. Published as a single DNS record, it builds on SPF and DKIM and reports back on who is using your domain - legitimate senders and impostors alike.
Read our guide to DMARC →FAQ
Common questions.
What is DMARC?
DMARC is an email authentication standard that lets you see who is sending email using your domain and tells receiving mail servers to block messages that fail authentication. It builds on SPF and DKIM and is published as a single DNS record.
Do I need DMARC?
If you send email from your own domain, yes. Since February 2024 Google and Yahoo require DMARC for anyone sending bulk email, and without it anyone can put your domain in the From line of a message.
What does DMARCHub do?
DMARCHub collects your DMARC reports from every mail receiver, turns the raw XML into a clear dashboard, hosts your MTA-STS policy, and alerts you when your DMARC record changes.
Where is my data stored?
All data is hosted in Microsoft Azure UK South and stays in the UK. Forensic report content is privacy-scrubbed at the point of ingest, so message bodies and recipients are never stored.
Beta
Want a closer look?
DMARCHub beta testing is going live soon. We are looking for a small group of UK organisations to help shape the platform before public launch. Get in touch and we will be back to you within a business day.