Free SPF, DKIM and DMARC check
Check your DMARC free. Let us finish it for EUR 249.
See in seconds whether people can send email pretending to be you, and get the exact records for your email provider. Or let us move your domain safely to p=reject. One price, no subscription.
Free. No signup. We do not store the domains you check.
- EUR 249 once per domain
- Refund if not at p=reject in 60 days
- No passwords or DNS access needed
Sample result
yourcompany.com
The free check
Not just pass or fail. The exact fix for your setup.
Most checkers stop at a red cross. We detect your email provider and your DNS host, then show the records to paste and where to paste them.
SPF, DKIM, DMARC and BIMI
Lookup limits, weak keys, missing reports, policies that only watch. Each finding explained in one plain sentence.
Your provider, detected
Microsoft 365, Google Workspace, Zoho, GoDaddy, IONOS, Strato and more. The records you get are written for your provider, not a generic template.
Copy, paste, check again
One-click copy for every record and a guide for your DNS host. Re-run the check to confirm the change is live.
Why it matters
p=none means anyone can still send email as you
A DMARC record at p=none only collects data. Receivers deliver fake email from your domain as normal until the policy says quarantine or reject.
Mailbox providers expect it
Google and Yahoo have required SPF, DKIM and DMARC from bulk senders since February 2024, and Microsoft followed for Outlook.com in 2025.
Spoofing is cheap
Fake invoices and payment-change requests sent from a lookalike of your exact address are the classic business email compromise. Enforcement stops the exact-domain version.
Scanners and insurers flag it
"DMARC policy not enabled" shows up in security scans, supplier questionnaires and cyber insurance forms. The fix is the same: get to enforcement safely.
Done for you
From p=none to p=reject without losing real email
- Day 0
1. Check and order
Run the free check. If you want it done for you, pay once. No call, no onboarding meeting.
- Day 0
2. Publish one record
We give you one DMARC record for your domain. Pasting it takes about 10 minutes. We confirm it went live.
- Days 1 to 14
3. We read your reports
Mailbox providers send daily reports. We turn them into a list of every service that sends email as you, with what each one needs fixed.
- Day 14 onward
4. Quarantine, then reject
When every real sender passes, we give you the next record. Fakes go to spam, then get blocked. Your real email keeps flowing.
- Until day 60
5. Watch and proof
Daily checks and an alert if a real sender starts failing. You get a proof page showing your domain at p=reject.
Pricing
One payment. Done.
Monitoring tools charge every month and leave the work to you. We do the work once and hand you a protected domain.
| Option | Cost | Who does the work |
|---|---|---|
| Free checker | EUR 0 | You, without reports |
| DMARC monitoring tool | about EUR 15 to 36 a month | You, every month |
| DMARC Done | EUR 249 once | Us |
Tool prices from public pricing pages of DMARCwise, DMARC Advisor and EasyDMARC, annual billing, checked 5 October 2026.
Fix to p=reject
Per domainEUR 249 one-time
- Sender audit from your real DMARC reports
- Exact SPF, DKIM and DMARC records for each step
- Staged move from p=none to p=reject
- 60-day watch with alerts
- Proof page for insurers and customers
- Full refund if we do not reach p=reject
Questions
What people ask before they order
Something else? Email hello@dmarcdone.com. A person answers.
Will this break my email?
Not if it is done in the right order, which is the whole point of the service. We start with a policy that only watches (p=none), read the daily reports until every service that sends email for you passes, and only then move to quarantine and reject. If a real sender starts failing during the watch period, we email you before it becomes a problem.
Do you need my DNS or email password?
No. We never ask for logins. We give you the exact records to paste, with step-by-step instructions for your provider. You, or whoever manages your domain, add them. We verify every change automatically.
How long does it take?
Publishing the first record takes about 10 minutes. Then we watch at least 14 days of reports to see everyone who sends email as you, and keep quarantine for at least 7 days before reject. So the fastest safe path is about 3 weeks. Domains with many sending services take longer, which is why the guarantee gives us 60 days.
What if you cannot get my domain to p=reject?
You get a full refund. If we do not reach p=reject within 60 days of purchase, and you published each record we recommended within 7 days, we refund the full EUR 249.
Is this a subscription?
No. One payment per domain. It includes the setup, the guided move to p=reject, and a 60-day watch with alerts. After that the records keep protecting you on their own.
I use Microsoft 365, Google Workspace, Mailchimp, a CRM and an invoicing tool. Is that a problem?
That is the normal case. The reports show every service sending as your domain. We tell you which ones need SPF or DKIM fixed and give you the exact steps for each.
Do I get an invoice?
Yes. Stripe issues an invoice automatically. You can add your company name and VAT number at checkout.
What do you store?
Free checks are not stored. For customers we store your email address, your order, and the aggregate DMARC reports for your domain. Those reports list sending server IP addresses and message counts, never message content.
See where your domain stands in 10 seconds
Free. No signup. We do not store the domains you check.