DMARC Reports

DMARC XML is unreadable.
We make it obvious.

Providers send you dozens of dense aggregate (rua) reports a day. Read by hand, they're useless. We ingest and aggregate them into clear analytics — every source sending as you, who's aligned, who's spoofing — and guide you safely from p=none to p=reject.

rua
aggregate reports ingested
3
stages to full enforcement
100%
of sources surfaced
BIMI
unlocked at reject
From XML to insight

See every source sending as you.

Aggregate reports name every IP and service that sent mail claiming to be your domain. We roll them up across providers and time so you can instantly tell your real ESPs from forgotten tools — and from outright spoofers.

  • Pass / fail per source. SPF and DKIM alignment, broken out by sender.
  • Spoofers, flagged. Unknown IPs failing authentication surface immediately.
  • Trends over time. Watch your pass rate climb as you fix each source.
DMARC · acme.io · last 7 days
DMARC pass rate92.4%
Your ESP (Klaviyo)12,840aligned
Transactional (SES)3,210aligned
Legacy CRM tool640partial
Unknown · 91.x.x.x1,902spoof
Verdict:one spoofer and one partly-aligned legacy tool. Fix the CRM's DKIM and you're clear to move to p=quarantine.
The guided path

From observe-only to protected.

Jumping straight to p=reject blocks your own mail. We track your legitimate sources until they're all aligned, then tell you exactly when each step is safe.

p=none1

Monitor

Start in observe-only. We ingest your aggregate (rua) reports and show every source sending as you — legitimate ESPs, forgotten tools and outright spoofers — with pass/fail rates per source.

p=quarantine2

Quarantine

Once your real senders are authenticating cleanly, step up to quarantine. We flag any source not yet aligned so nothing legitimate gets caught as you tighten the screw.

p=reject3

Reject

Reach full enforcement with confidence. Spoofed mail is rejected outright, your domain is protected, and BIMI becomes available — your logo in the inbox.

The payoff

Enforcement unlocks your logo.

Reaching p=reject does more than stop spoofers. It's the prerequisite for BIMI — the verified logo that appears next to your name in the inbox. That's the trust signal recipients actually see, and it's only available once your DMARC is at enforcement.

  • Spoofing stopped. Forged mail using your domain is rejected outright.
  • BIMI eligible. Enforcement is the gate; we get you through it safely.
  • Reputation compounding. A protected, authenticated domain is a trusted one.
Acme Inc.✓ verified sender · logo live
p=reject
Questions

Good to know.

Mailbox providers send daily XML reports (rua) summarizing every message that claimed to come from your domain — which passed SPF and DKIM, which failed, and from what IPs. They're invaluable and completely unreadable by hand. We parse them into clear analytics.

Stop guessing at your DMARC.

Point your rua reports at us and turn a daily pile of XML into a clear, guided path to enforcement. Free to start — no credit card.

Start ingesting reports