Skip to content
Complete Email Authentication Platform

Every protocol. One platform.

Monitor, analyze, and enforce all email authentication standards. From basic DMARC monitoring to managed MTA-STS and BIMI hosting — everything in one place.

DMARCSPFDKIMMTA-STSTLS-RPTBIMIARCDANE
SOC 2 + ISO 27001 (in progress)
99.99% SLA target
Inherits PlatOps Security infrastructure
Protocol coverage

Every email security standard, covered.

Deep support for all eight modern email-authentication protocols — not just DMARC.

Authentication

DMARC

Domain-based Message Authentication

Parse aggregate and forensic reports, track policy compliance, and safely progress from p=none to p=reject.

  • Aggregate report parsing
  • Forensic report analysis
  • Policy progression wizard
  • Multi-domain management
Authentication

SPF

Sender Policy Framework

Validate SPF records, detect lookup-limit issues, and monitor authorized senders across your domain.

  • Record validation
  • Lookup-limit detection
  • Sender inventory
  • Alignment tracking
Authentication

DKIM

DomainKeys Identified Mail

Monitor DKIM selectors, detect key-rotation needs, and validate signing configurations across all senders.

  • Selector monitoring
  • Key-rotation alerts
  • Signing validation
  • Selector discovery
Authentication

ARC

Authenticated Received Chain

Analyse ARC headers for forwarded messages to understand how email flows through intermediaries.

  • ARC header analysis
  • Forwarding-chain visibility
  • Intermediary tracking
  • Seal validation
Transport

MTA-STS

Mail Transfer Agent Strict Transport Security

Managed MTA-STS policy hosting — we handle certificates, CDN, and policy updates so you don't have to.

  • Managed policy hosting
  • Automatic certificate renewal
  • CDN distribution
  • Zero maintenance
Transport

TLS-RPT

SMTP TLS Reporting

Collect and analyse TLS reporting data to detect delivery failures and STARTTLS downgrade attempts.

  • Report aggregation
  • Failure analysis
  • Downgrade detection
  • Trend monitoring
Transport

DANE

DNS-based Authentication of Named Entities

Monitor TLSA records and verify DANE configurations to protect against certificate substitution attacks.

  • TLSA monitoring
  • DNSSEC validation
  • Certificate pinning
  • Mismatch alerts
Brand

BIMI

Brand Indicators for Message Identification

Managed BIMI hosting with VMC certificate support — display your logo in email clients that support BIMI.

  • SVG logo hosting
  • VMC certificate support
  • DNS record generation
  • Inbox preview
Guided deployment

From zero to full enforcement in weeks.

DDMARC guides you through every phase with automated recommendations and safety checks.

012–4 weeks

Monitor

policy:p=none

Collect reports without affecting mail delivery. See every sender using your domain.

  • Add DMARC record (p=none)
  • Connect aggregate reporting
  • Identify all sending sources
  • Review unauthorized senders
022–4 weeks

Quarantine

policy:p=quarantine

Move unauthorized senders to spam. Authorized senders continue delivering normally.

  • Authorize all legitimate senders
  • Configure SPF & DKIM for each
  • Test with small percentage
  • Monitor for delivery issues
03Ongoing

Enforce

policy:p=reject

Block all unauthorized email outright. Full protection from spoofing and phishing.

  • Ramp to p=reject 100%
  • Enable MTA-STS & BIMI
  • Set up alerting rules
  • Monitor continuously
04Ongoing

Optimize

policy:Advanced

Fine-tune alerting, expand BIMI, and maintain a clean sender reputation.

  • Custom alert thresholds
  • Expand BIMI branding
  • API integrations
  • Quarterly reviews
Platform

A dashboard built for clarity.

No noise, no clutter — just the insights you need to keep your email secure.

Real-time analytics

Live dashboards showing pass/fail rates, volume trends, and sender breakdown. Drill down by IP, country, or sender.

Smart alerting

Slack, Teams, email, or webhook notifications when something needs attention — without alert fatigue.

Multi-domain management

All your domains from one dashboard. Bulk policy updates, centralized reporting, and team access controls.

Export & reports

CSV exports, PDF executive reports, and raw DMARC XML. Schedule weekly or monthly email digests.

Mobile-ready

Responsive dashboard built for any device. Monitor your domain security on the go.

REST API + webhooks

Full programmatic access. Integrate DMARC data into your SIEM, ticketing system, or custom workflows.

For MSPs & resellers

Build your own email-security business.

White-label DDMARC under your brand. From $299/mo for 100 active domains, $2.99 per extra.

White-label dashboard

Full rebranding — your logo, colors, and custom domain.

Predictable pricing

$299/mo for 100 active domains, then $2.99 per extra. Inactive domains free.

Customer analytics

Aggregate reporting across all your customers in one console.

Multi-tenant by design

Hard data isolation between clients with per-client RBAC.

Integrations

Works with your stack.

REST API + webhooks live today. Native PSA / RMM modules on the roadmap.

Slack
Notifications
Microsoft Teams
Notifications
Discord
Notifications
Telegram
Notifications
Email digest
Notifications
Custom webhooks
Automation
REST API
Automation
CSV / PDF export
Analytics
Google OAuth
Auth
SAML SSO
Auth
API keys
Auth

Security & compliance

SOC 2 Type IIIn progress
ISO 27001In progress
GDPRAligned
CCPAAligned

DDMARC product audits in progress. Underlying PlatOps Security infrastructure already certified.

Free to start · 14-day trial · no card

From spoofed to enforced.

p=none
5 min
p=quarantine
Week 2
p=reject
Week 4–6

Drop to free Monitor plan on day 15 · no charge unless you opt in