dmarcian
DMARC report processing and guidance for moving domains to enforcement.
Configuration Management
Email authentication (DMARC)
Nobody can send email that pretends to come from your domain.
Addresses 38 stories in our coverage in the last 90 days 4 products that provide it
What it is
Publishing SPF, DKIM and an enforced DMARC policy, and monitoring the reports, so receiving mail servers reject messages that spoof your domain.
How to value it
Email spoofing your own domain is used to defraud your customers and suppliers, and it damages trust in your brand. The large mailbox providers now require DMARC from bulk senders. Enforcement is mostly a configuration project; the tools help you find every legitimate sender first, so nothing breaks.
Questions to ask a vendor
- 1Will it get us to p=reject without blocking our own legitimate mail?
- 2Does it identify every service that sends mail as our domain?
- 3Does it cover all our domains, including parked ones?
- 4Does it support BIMI and MTA-STS?
For your risk register
- Risk
- Criminals send fraudulent email in our name to customers and suppliers.
- Control
- SPF, DKIM and DMARC at p=reject on all domains.
- Owner
- IT operations lead.
- Measure
- Domains at DMARC enforcement.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Proofpoint Email Fraud Defense
DMARC deployment and monitoring with hosted SPF and DKIM services.
Red Sift OnDMARC
Guided DMARC deployment and monitoring, with support for BIMI and MTA-STS.
Valimail Enforce
Automated DMARC enforcement with discovery of every service that sends mail as your domain.
Recent stories it addresses
85 stories in total- 12 Nov 2026Hijacked email accounts complicate investigations into European bomb hoaxes
Bomb threats sent to thousands of European schools originated from a compromised Taiwanese university email account.
- 9 Nov 2026SEGA newsletter data breach exposes 2.2 million email addresses
SEGA reports 2.2 million email addresses exposed in third-party newsletter provider data breach.
- 9 Nov 2026Outlook.com bounces legit emails as Microsoft's authentication crackdown goes sideways
Microsoft's Outlook.com is bouncing legitimate emails due to an authentication crackdown.
- 9 Nov 2026Trio accused of using deepfake CEOs and bogus lawyers to scam businesses out of $129 million
Three men accused of using deepfake CEOs and lawyers to scam businesses out of $129 million.
- 6 Nov 20263 Charged in Scheme to Use AI to Impersonate CEOs and Attorneys to Steal $129 Million
Three individuals indicted for using AI to impersonate CEOs and attorneys to steal $129 million.
- 5 Nov 2026US Government Email Systems Open to Abuse Thanks to Typos
US government email systems vulnerable to abuse via misconfigured DNS records.
- 5 Nov 2026Email threat landscape: Q3 2026 trends and insights
Microsoft reports a 41% surge in email phishing in September 2026, with credential theft as a primary goal.
- 2 Nov 2026Hackers Exploit ChatGPT’s Popularity With Fake Billing Notices That Target Credit Cards and OTPs
Hackers impersonate OpenAI in fake ChatGPT billing emails to steal credit card details and OTPs.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.