DMARC Report
dmarcreport.com
What it is
DMARC Report processes aggregate and forensic DMARC reports, showing authentication results and sending sources in dashboards. It monitors SPF, DKIM, and DMARC records for changes, failures, and other issues, with alerts by email, webhook, or Slack. Forensic analysis adds per-message details such as sender IP, header information, authentication failures, and receiver disposition. Teams can use it while moving domain policies toward quarantine or reject. The service includes AI analysis, a REST API, and MCP integration for compatible tools including Claude and ChatGPT. MSPs can manage client domains through a multi-tenant portal with white-label reports, role-based access, and bulk onboarding. The free Core plan covers one domain and 10,000 messages per month, with 30 days of history and aggregate reports. Paid plans start at $25/mo; listed plans add message capacity, domains, history, and reporting or access features. The website also offers free checks for DMARC, SPF, DKIM, BIMI, and MTA-STS without signup. Founded in 2014, DMARC Report is headquartered in California.
Spec sheet
- What it does
- DMARC Report is a cloud service that parses aggregate and forensic DMARC reports and displays sending sources plus SPF, DKIM and DMARC outcomes.Read 15 Oct 2026 · dmarcreport.com
- Purpose
- DMARC Report processes aggregate and forensic DMARC reports and displays authentication results and sending sources in dashboards.Read 10 Oct 2026 · dmarcreport.com
- Security
- The service is in scope for DuoCircle's SOC 2 Type II examination and has a CSA STAR Level 1 registry entry; annual third-party penetration testing is stated.Read 10 Oct 2026 · dmarcreport.com
- Support
- The company lists [email protected] and +1-855-700-1386 as support contacts.Read 10 Oct 2026 · dmarcreport.com
- Headquarters
- California, United StatesRead 28 Sep 2026 · dmarcreport.com
- Founded
- 2014Read 28 Sep 2026 · dmarcreport.com
- Aggregate reporting
- Its dashboards turn XML aggregate reports into visual sender and authentication summaries.Read 15 Oct 2026 · dmarcreport.com
- AI analysis
- Built-in AI analyzes sender patterns, highlights anomalies and explains recommended actions in natural language.Read 15 Oct 2026 · dmarcreport.com
- AI and integrations
- The product offers AI analysis, a REST API, and MCP integration for compatible AI tools including Claude and ChatGPT.Read 10 Oct 2026 · dmarcreport.com
- Alerts
- Alerts can be delivered by email, webhook or Slack for authentication and record issues.Read 15 Oct 2026 · dmarcreport.com
- API authentication
- API requests use an HTTP Authorization header containing a token created in the account profile.Read 15 Oct 2026 · docs.dmarcreport.com
- API documentation depth
- API documentation lists CRUD routes, filtering, pagination, statistics, trends, alignment failures, PDF exports and hosted-record verification endpoints.Read 15 Oct 2026 · docs.dmarcreport.com
- Company headquarters
- The listed headquarters address is 5965 Village Way Suite 105-234, San Diego, California 92130, United States.Read 15 Oct 2026 · duocircle.com
- Company legal name
- The service is operated by DuoCircle LLC.Read 15 Oct 2026 · duocircle.com
- Company size and founding
- LinkedIn lists DMARC Report as a privately held technology and internet company founded in 2018 with 11–50 employees.Read 15 Oct 2026 · linkedin.com
- Data residency
- The company says DMARC data is stored exclusively in AWS eu-central-1 in Frankfurt with no replication outside the EU.Read 15 Oct 2026 · dmarcreport.com
- DMARC enforcement
- The platform supports teams progressing DMARC policy toward quarantine or reject across their domains.Read 10 Oct 2026 · dmarcreport.com
- Forensic analysis
- Forensic reports provide per-message failure details, including sender IP, header information, authentication failures, and receiver disposition.Read 10 Oct 2026 · dmarcreport.com
- Forensic reporting
- Forensic reports provide per-message failure details, causes, source information, anomaly detection and threat classification.Read 15 Oct 2026 · dmarcreport.com
- Forensic-report limitation
- The support documentation says some email providers do not send forensic reports and external-domain report authorization may require DNS changes; reports can take one to two days.Read 15 Oct 2026 · support.dmarcreport.com
- Free tools
- The site offers free tools to check DMARC, SPF, DKIM, BIMI, and MTA-STS records without signup.Read 10 Oct 2026 · dmarcreport.com
- Hosted SaaS
- The maker describes DMARC Report as SaaS operated by DuoCircle LLC; the reviewed official pages do not describe a self-hosted or on-premises edition.Read 15 Oct 2026 · dmarcreport.com
- Integration limitation
- The SuperOps integration requires manual synchronization for new clients because SuperOps lacks outbound webhooks.Read 15 Oct 2026 · support.dmarcreport.com
- Limit: AppSumo users
- AppSumo reviewers report occasional portal outages or support-login problems, setup complexity for nontechnical users and concern about message limits or recurring charges.Read 15 Oct 2026 · appsumo.com
- Limit: G2 users
- Reviewers report that technical terminology, navigation and documentation can overwhelm nontechnical users and that remediation guidance could be more prioritized.Read 15 Oct 2026 · g2.com
- Limit: GetApp users
- Reviewers say navigation is unintuitive and global multi-domain views are difficult to use.Read 15 Oct 2026 · getapp.com
- Limit: Software Advice users
- Software Advice reviews mention a clunky interface, incomplete documentation, unclear MTA-STS instructions, integration gaps and a 75,000-message monthly limit viewed as insufficient by one reviewer.Read 15 Oct 2026 · softwareadvice.com
- Limit: Trustpilot users
- One detailed reviewer describes the interface as clunky, documentation as insufficiently detailed and integrations or advanced features as less extensive than competitors.Read 15 Oct 2026 · trustpilot.com
- MCP extensibility
- A native MCP server package named @duocircle/dmarcreport-mcp connects Claude, Cursor and other MCP clients to DMARC data and reasoning tools.Read 15 Oct 2026 · dmarcreport.com
- MCP licence
- The separate dmarcreport-mcp package is published as open-source MIT-licensed software with TypeScript support and npx installation.Read 15 Oct 2026 · npmjs.com
- Monitoring
- It continuously monitors SPF, DKIM, and DMARC records and alerts users to changes, failures, and issues needing attention.Read 10 Oct 2026 · dmarcreport.com
- MSP features
- The MSP program offers multi-tenant dashboards, role-based client access, white-label PDF reports and bulk onboarding by CSV or API.Read 15 Oct 2026 · dmarcreport.com
- MSP use
- MSPs can manage clients through a multi-tenant portal with white-label reports, role-based access, and bulk domain onboarding.Read 10 Oct 2026 · dmarcreport.com
- MTA-STS and TLS-RPT
- Paid tiers provide hosted or monitored MTA-STS and TLS-RPT capabilities.Read 15 Oct 2026 · dmarcreport.com
- Multi-domain management
- One dashboard can manage DMARC for multiple domains, including MSP client portfolios.Read 15 Oct 2026 · dmarcreport.com
- Notable news
- A DuoCircle support notice dated October 12, 2026 says DMARC Report moved to shared DuoCircle sign-in while domains, reports, alerts, teams, white-label functions and API tokens remain unchanged.Read 15 Oct 2026 · support.duocircle.com
- Plan limits
- The free Core plan includes one domain and 10,000 DMARC messages per month, while paid plans have no per-domain fees.Read 10 Oct 2026 · dmarcreport.com
- Praise: G2 users
- Reviewers repeatedly praise thorough reports, clear visual dashboards, easy setup, multi-domain visibility and deliverability or spoofing detection.Read 15 Oct 2026 · g2.com
- Praise: GetApp users
- GetApp reviewers describe streamlined email-security workflows and straightforward sender pass/fail visibility; scheduled reports and API features receive high feature scores.Read 15 Oct 2026 · getapp.com
- Praise: Trustpilot users
- Trustpilot reviewers commonly praise quick setup, readable reports, reliable monitoring, spoofing alerts, hosted DMARC or MTA-STS and responsive support.Read 15 Oct 2026 · trustpilot.com
- Protocol monitoring
- The service continuously monitors SPF, DKIM and DMARC records and alerts when they change or fail.Read 15 Oct 2026 · dmarcreport.com
- Rating on AppSumo
- 4.8 out of 5 from 220 reviews.Read 15 Oct 2026 · appsumo.com
- Rating on G2
- 4.8 out of 5 from 473 reviews.Read 15 Oct 2026 · g2.com
- Rating on GetApp
- 5.0 out of 5 from 34 reviews.Read 15 Oct 2026 · getapp.com
- Rating on Software Advice
- 5.0 out of 5 from 34 reviews.Read 15 Oct 2026 · softwareadvice.com
- Rating on Trustpilot
- 4.8 out of 5 from 45 reviews.Read 15 Oct 2026 · trustpilot.com
- REST API
- The documented REST API supports account, domain, aggregate report, forensic report, alert, BIMI, MTA-STS, email-test and user-member operations.Read 15 Oct 2026 · docs.dmarcreport.com
- Security claims
- Official pages state SOC 2 Type II certification, a 99.99% uptime SLA, SSO/SAML, RBAC, audit logs and DNS rollback.Read 15 Oct 2026 · dmarcreport.com
- Support documentation
- The support knowledge base lists training, general, troubleshooting and FAQ articles, with HaloPSA and SuperOps integration guides.Read 15 Oct 2026 · support.dmarcreport.com
- Vendor identification
- DMARC Report automatically classifies sending sources using a database of more than 200 email providers.Read 15 Oct 2026 · dmarcreport.com
Plans and prices
Strong points and limits
Strong points
- Monitors SPF, DKIM, and DMARC records continuously
- Forensic reports include per-message failure details
- Alerts can use email, webhook, or Slack
- Free plan includes one domain and 10,000 monthly messages
- Free DNS record checking tools need no signup
Limits
- Free Core is limited to one domain
- Free Core includes 30 days of data history
- Paid plans start at $25/mo
Who it suits
It suits teams monitoring email authentication and working toward stricter DMARC policies. MSPs can use its client portal and white-label reporting to manage multiple customers.
DMARC Report in depth
Read the full write-up
DMARC Report is built for organisations that need to understand, troubleshoot and progressively enforce email authentication across their domains. It is especially well suited to managed service providers that need tenant separation and branded client reporting. The main trade-off is a tightly capped free tier versus paid plans that scale into substantial monthly volumes and operational support.
Overview
DMARC Report converts aggregate and forensic DMARC reports into dashboards of authentication outcomes and sending sources. It continuously watches SPF, DKIM and DMARC records, highlighting failures, record changes and issues that need attention. Email, webhook and Slack alerts can notify a team when authentication rates fall, an unauthorised sender appears or DNS changes.
Forensic reporting supplies message-level evidence: sender IP, header information, the authentication failures involved and the receiver's disposition. That context is materially more useful than aggregate counts when investigating a campaign, vendor or misconfigured system. Teams can use the service while moving policies toward quarantine or reject, rather than making an enforcement change without visibility into its likely impact.
Key features
Reporting and policy progression
Aggregate reports are present in Core. Guard adds failure reports, and the higher tiers provide more advanced failure analysis. This makes Core suitable for establishing a baseline, but incident investigation and policy work become substantially more practical once message-level reporting is included.
Monitoring and alerts
Continuous SPF, DKIM and DMARC monitoring reduces the chance that a DNS edit or new sender quietly damages authentication. Alerts through email, webhooks and Slack fit both human review and automated response workflows.
Automation and AI access
AI analysis, a REST API and MCP integration for compatible tools such as Claude and ChatGPT connect DMARC data to operational tooling. API and MCP access starts with Shield, while Defender adds advanced API access and MCP access; buyers on Core or Guard should not assume those integrations are included.
MSP administration
MSPs get a multi-tenant portal, white-label reports, role-based access and bulk domain onboarding. Those controls are a strong reason to choose DMARC Report for client programmes, rather than assembling separate accounts and manual reports.
Security and data location
DMARC data is stored in AWS eu-central-1 in Frankfurt, Germany, with no storage or replication outside the EU. The service is in scope for DuoCircle's SOC 2 Type II examination, has a CSA STAR Level 1 registry entry and states that it performs annual third-party penetration testing. Support is provided by [email protected] and +1-855-700-1386.
Pricing
DMARC Report is freemium, with a 30-day trial and paid plans from $25 per month. Paid plans have no per-domain fees, so the practical constraint is each tier's message and domain allowance rather than an extra charge for every domain.
PlanPriceWhat it includesCorefree10,000 monthly messages, 1 domain, subdomains, 30 days of data history and aggregate reports.Guard$25 a month250,000 monthly messages, 5 domains, 6 months of history, aggregate and failure reports, email vendor ID, and group and permission management.Shield$75 a month1,000,000 monthly messages, 10 domains, 1 year of history, MTA-STS and TLS-RPT, API and MCP access, email support and alerts.Defender$200 a month3,000,000 monthly messages, 25 domains, advanced API access, MCP access, advanced failure reports and advanced support.Ultimatepriced on requestUnlimited domains, 3 years of history, done-with-you enforcement, a dedicated DMARC engineer and a 90-day p=quarantine pct=100 guarantee.Core is credible for one low-volume domain, but its 10,000-message ceiling and 30-day history leave little room for a growing sender or forensic retrospection. Guard is the sensible starting point for a small team with several domains. Shield is aimed at organisations needing integrations, longer retention and adjacent MTA-STS or TLS-RPT coverage. Defender buys substantially more capacity and support; Ultimate is an enterprise engagement priced per contact rather than a standard monthly subscription.
Platforms
DMARC Report is offered through a web application and API. MCP connectivity is included on Shield and above, enabling compatible AI tools to work with the service.
Who it's for
Choose it for email teams responsible for DMARC enforcement across multiple domains, security or IT groups that need forensic evidence, and MSPs managing many clients under one portal. It is less compelling for a single small sender that only needs occasional checks: Core is limited, while paid tiers may exceed that requirement.
The provider also offers free, no-signup checks for DMARC, SPF, DKIM, BIMI and MTA-STS records. These are useful for a one-off diagnosis, not a substitute for continuous monitoring.
Pros and cons
Pros
Strong investigation path: forensic reports expose sender, header, failure and receiver details instead of stopping at aggregate statistics.
Useful enforcement workflow: continuous monitoring and alerts support a measured move toward quarantine or reject.
MSP-ready controls: multi-tenancy, white-label reports, permissions and bulk onboarding fit client operations.
EU-only data location: storage and replication remain in Frankfurt, Germany.
Integration ceiling is high: API, MCP and AI analysis support automation on the upper plans.
Cons
Free capacity is narrow: one domain and 10,000 messages per month can be exhausted quickly by a busy sender.
Short free retention: Core keeps only 30 days of history, limiting long-term trend analysis.
Important integrations are paid-gated: API and MCP access starts at Shield, not the entry paid tier.
Enterprise pricing jumps sharply: Defender is $200 a month and Ultimate is priced on request.
Alternatives
Browse email deliverability software if DMARC monitoring is only one part of a broader deliverability requirement.
Postmark suits teams primarily sending application email, with a free allowance of 100 emails per month and paid plans from $15 a month.
EasyDMARC is an alternative freemium DMARC service with a free tier for 1,000 emails per month and one domain.
GlockApps is worth considering when spam tests and uptime or IP-reputation monitoring matter alongside 10,000 free DMARC messages.
Suped fits web-only users wanting a free plan with 1,000 emails per month, one domain and unlimited users.
Folderly is an alternative for teams focused on inbox insights and deliverability workflows.
dmarcian offers another DMARC-focused option, including a Basic plan at $19.99 a year.
Fraudmarc is the alternative to examine if a self-hosted, open-source DMARC analyzer is preferred.
Verdict
DMARC Report is a strong choice for teams and MSPs that need continuous authentication monitoring, forensic depth and a structured route to enforcement, especially when tenant management or API and MCP workflows matter. Look elsewhere if you only need a lightweight one-domain check, want integrations at the lowest paid tier, or cannot justify the jump to higher-volume plans.
Verdict
DMARC Report combines authentication monitoring, forensic details, and policy progression tools with API and MCP access. Its free plan has defined domain and message limits, while paid plans start at $25/mo.
Where Specifiction places it
- Email Deliverability Software#2 of 319.3