Features
Quietly do the DMARC heavy lifting.
DMARC is a fiddly protocol with an even fiddlier set of reports coming back at you. DMARCHub turns the firehose into a clear picture and tells you when something needs attention.
Capabilities
Six things DMARCHub handles for you.
Aggregate reports turned into something you can read
DMARC RUA reports arrive every day from Google, Microsoft, Yahoo, and dozens of smaller mail receivers. We parse them, normalise the data, and give you a clean view of who's sending mail as your domain, what's passing alignment, and what isn't.
Forensic reports, privacy-scrubbed automatically
When a receiver sends us a failed-message sample, we keep the technical headers and source IP and throw away the body, subject, and recipient details. You get the information you need to investigate without taking on a pile of customer email content.
Managed SPF - one record, and we keep it under ten lookups
SPF gives a receiving server ten DNS lookups and no more, and four or five email services is often enough to blow past it. Point your domain at us with a single TXT record and we resolve your senders down to plain addresses, keep them current as your providers change theirs, and never shrink your record on the strength of a lookup we could not confirm.
Hosted MTA-STS - a guided setup, and we serve the policy
MTA-STS lets receivers encrypt mail to you over verified TLS. Hosting it yourself means running an HTTPS server with a hand-rotated policy file. With DMARCHub the portal checks your mail servers, you pick a mode, you publish two CNAMEs and we serve the policy. Rotations are automatic.
DNS drift alerts
If the DNS behind your email changes externally - someone in your team edits a record, a new vendor adds one, an attacker plants one - we notice, usually within ten minutes, and email you. That covers your DMARC record, your nameservers, your mail servers, your SPF and DKIM records and whether DNSSEC is switched on. You see what changed and decide whether it was intentional.
Built for UK businesses
UK data residency by default (Azure UK South). Encryption at rest and in transit. Authentication via Microsoft Entra or Google Workspace so we never see your password. Cyber Essentials Plus aligned controls in our infrastructure.
Beta
Want a closer look?
DMARCHub beta testing is now live. Sign up with your work Microsoft or Google account to get started.