Home DMARC Service

Prime DMARC – Free DMARC Solution

DMARC Monitoring and Reporting for Your Domain

Q: Can I monitor a domain that already uses quarantine or reject?

DMARC reporting can operate with p=none, p=quarantine, or p=reject. When configuring Prime DMARC, review your existing records and the supplied instructions so your intended policy is preserved.

Q: Can I review reports by sending source and receiving provider?

Yes. By Source groups reported messages by sending source, helping you investigate sending IPs and their authentication results. By Reporter groups activity by the receiving providers that submitted the reports.

Q: What is the difference between p=none, p=quarantine, and p=reject?

p=none requests no change in message handling based on DMARC failure alone. p=quarantine asks receivers to treat failing messages as suspicious, such as placing them in spam. p=reject asks receivers to reject failing messages. Receiving providers make the final handling decision.

Prime DMARC brings sending sources and email authentication results into one clear dashboard. Turn complex DMARC reports into a readable view of domain activity, authentication failures, and trends.

Investigate unfamiliar senders, identify SPF and DKIM alignment issues, and prioritize what needs attention. Use these insights to assess readiness for DMARC enforcement and make informed policy decisions.

Free One-Domain Monitoring
Centralized Authentication Insights
Domain Risk Visibility
Informed DMARC Policy Decisions

Request DMARC Monitoring

Prime DMARC insights: trends, alignment, and sending sources. Sample data with example domains.

Enlarge sample screen

What it is
What’s included
Free plan
Dashboard
DMARC setup
Policy & enforcement
Toolbox
BIMI
FAQs

DMARC email security

What Does a DMARC Monitoring Service Do?

A DMARC monitoring service collects authentication reports from participating email providers and turns them into readable results. These reports show which sources are reported as sending email using your domain, whether messages pass DMARC, and how receiving systems handle them.

Prime DMARC groups reported activity by sending source and highlights authentication results. This helps you investigate unfamiliar sources and find legitimate services that need configuration changes before tightening your policy.

DMARC monitoring provides visibility. Your published policy tells receiving systems how you want messages that fail DMARC to be treated.

What is DMARC and How to Set It Up

Prime DMARC Features

Tools for DMARC Reporting and Domain Monitoring

Prime DMARC brings authentication reports, sending-source analysis, and domain monitoring into one platform. Explore the tools available to investigate issues and prioritize what needs attention. Feature availability depends on the selected plan.

DMARC Report Analyzer

Turn aggregate reports into readable views of sending sources, authentication results, and reported message handling.

Sending Source Analysis

Review source labels such as Authenticated, Unknown Sender, No Alignment, and Forwarder to prioritize investigation.

Authentication Trends

Track DMARC pass rates and SPF and DKIM alignment over time. Spot changes that may follow DNS updates or changes to sending services.

Look-alike Domain Monitoring

Review domain variants that resemble your brand. Use risk scores and available DNS signals to assess candidates that need investigation.

Action Center

Review failing sources, domain warnings, and recommended next steps in one view before changing authentication settings or DMARC policies.

Hosted DMARC and SPF

Access hosted DMARC and SPF configuration options. Review existing records and follow supplied instructions before updating DNS settings.

DKIM Assistant

Access a domain-based workflow for investigating DKIM configuration and alignment. Use it to guide further checks with your sending provider.

Alerts and Notifications

Review notifications about new failing senders and changes in DMARC results. Access alert-rule settings to configure available notification triggers.

Downloadable DMARC Reports

Access PDF and CSV export options for reporting. The compliance-report screen also provides a PDF summary option for internal reviews and sharing.

Additional platform capabilities:

Geographic reporting
Forensic report analysis
Reputation and blocklist checks
Scheduled reports
Team access
API access

Free DMARC Monitoring

Start with Free DMARC Monitoring

Monitor one domain at no cost with Prime DMARC. Review reported authentication activity and identify sending sources that need attention.

Request Free Monitoring

Free monitoring covers one domain. Additional domains require another plan.

Prime DMARC Dashboard

Explore DMARC Reports and Domain Monitoring Tools

Prime DMARC turns aggregate DMARC reports into readable views of reported email activity. Explore sending sources, authentication trends, look-alike domain findings, and recommended actions to identify what needs attention.

By Source: each sending IP with its SPF and DKIM alignment and a status label. Sample data.

Enlarge sample screen

Review Sending Sources in Detail

The By Source report groups reported messages by sending IP and displays message volumes alongside authentication results. Use source labels and detailed results to investigate unfamiliar activity and identify alignment issues.

Identify sending IPs recorded in DMARC reports.
Compare SPF, DKIM, and DMARC results for each source.
Review message handling reported by participating receivers.

Trends: DMARC pass rates and pass versus fail volume. Sample data.

Enlarge sample screen

Track Email Authentication Trends Over Time

Compare daily DMARC pass rates with SPF and DKIM alignment and message volumes. Use these trends to investigate changes that may follow DNS updates or changes to sending services.

Track the percentage of reported messages passing DMARC.
Compare SPF and DKIM alignment across the reporting period.
Review daily volumes of passing and failing messages.

Prime DMARC Look-alike Domain Monitoring

Look-alike domain monitoring with risk scores and triage actions. Sample data.

Enlarge sample screen

Review Look-alike Domains That Need Attention

Prime DMARC displays domain variants that resemble your monitored domain, alongside risk scores and available DNS signals. Use these findings to prioritize candidates for investigation.

Review domain names that resemble your monitored domain.
Assess risk scores alongside available DNS information.
Organize candidates using the available review statuses.

A similar name or elevated score alone does not confirm malicious activity.

Action Center: pending recommendations and sending sources to review. Sample data.

Enlarge sample screen

Prioritize Authentication Issues with Action Center

Prime DMARC’s Action Center brings domain warnings, failing sources, and recommended next steps into one view. Assess each finding before making changes to authentication settings or DMARC enforcement.

Review warnings associated with monitored domains.
Investigate sending sources with reported authentication failures.
Evaluate suggested actions against your DNS and sender configurations.

DMARC Setup

How to Start Monitoring with Prime DMARC

Add your domain, complete the supplied DNS configuration, and review authentication reports as they arrive.

Add Your Domain

Enter the email domain you want to monitor. Start with free monitoring for one domain, or select another plan for additional domains.

Configure DNS

Follow the supplied DNS instructions for your domain. Review existing DMARC settings and preserve your current policy unless you intend to change it.

Review Reports

Review sending sources, authentication results, and message volumes as reports arrive. Reporting begins when participating email providers submit data for your domain.

Investigate Issues

Check unfamiliar sources and resolve alignment issues with legitimate senders. Review subsequent reports to assess the results before changing your DMARC enforcement policy.

DMARC policy and enforcement

Use Reporting Insights to Guide DMARC Enforcement

DMARC reports help you assess legitimate sending services before changing your policy. Review authentication failures and resolve alignment issues to reduce the risk of disrupting legitimate email.

Policy	What It Requests	What to Review
`p=none`	No change to message handling based on DMARC failure alone.	Identify sending sources and investigate authentication failures.
`p=quarantine`	Treat messages that fail DMARC as suspicious, such as placing them in spam.	Check whether legitimate messages are failing before tightening enforcement.
`p=reject`	Reject messages that fail DMARC.	Continue monitoring for failures as sending services and configurations change.

Already using quarantine or reject? Review your existing configuration before making changes. Monitoring does not require resetting your policy to p=none

Email Security Toolbox

Email Authentication and Security Tools

Prime DMARC includes tools for reviewing email authentication records, preparing configurations, and investigating reported failures. Use them alongside monitoring reports to guide checks of your domain’s DNS and sending services.

DMARC Record Lookup

Inspect your published DMARC record and review its policy and reporting settings.

DMARC Record Generator

Prepare a DMARC record based on your intended policy and reporting configuration.

SPF Record Checker

Check SPF record syntax and DNS lookup usage to identify configuration issues.

SPF Flattener

Explore flattening options for complex SPF records. Review update requirements before use.

DKIM Record Lookup

Look up a specified DKIM selector and inspect the public key published in DNS.

DKIM Selector Discovery

Scan common selectors to help locate DKIM records published for your domain.

BIMI Validator

Review BIMI configuration, logo, and certificate requirements for email logo display.

MTA-STS Checker

Check MTA-STS policy and TLS reporting configuration for potential issues.

Forensic Report Parser

Upload and analyze DMARC forensic reports to investigate reported authentication failures.

BIMI and Email Logo Display

Prepare Email Authentication for BIMI

DMARC enforcement is a prerequisite for BIMI. Prime DMARC helps you review reported sending sources and authentication results before moving to a p=quarantine or p=reject policy. Monitoring alone does not enable email logo display. Once authentication is ready, explore the certificate options for your logo:

Verified Mark Certificates (VMC)

For eligible registered trademark logos, with support for logo display in supported inboxes and Gmail’s blue checkmark.

Explore Verified Mark Certificates

Common Mark Certificates (CMC)

For eligible logos with prior use evidence, without requiring trademark registration. Logo display in supported inboxes.

Explore Common Mark Certificates

Logo display also depends on meeting BIMI requirements and the receiving email provider’s criteria.

Common Questions

Frequently Asked Questions About Prime DMARC

Find answers to common questions about Prime DMARC, its monitoring features, email authentication reports, and DMARC policy management.

What is DMARC monitoring?

A DMARC monitoring service collects aggregate reports from participating receiving providers and turns them into readable results. These reports show reported sending sources and authentication outcomes, helping you investigate failures and make informed enforcement decisions.

Is free DMARC monitoring available with Prime DMARC?

Prime DMARC offers free monitoring for one domain. Additional domains require another plan. Feature availability varies by plan.

How do I start monitoring a domain?

Add your domain and follow the DNS configuration instructions provided in Prime DMARC. Review existing records before making changes. Use the platform’s supplied instructions rather than copying a generic DMARC record example.

Can I monitor a domain that already uses quarantine or reject?

DMARC reporting can operate with p=none, p=quarantine, or p=reject. When configuring Prime DMARC, review your existing records and the supplied instructions so your intended policy is preserved.

What does the Prime DMARC report analyzer show?

The reporting views show reported sending sources, message volumes, and SPF, DKIM, and DMARC results. You can review activity by sending source or reporting provider and examine authentication trends over time.

Can I review reports by sending source and receiving provider?

Yes. By Source groups reported messages by sending source, helping you investigate sending IPs and their authentication results. By Reporter groups activity by the receiving providers that submitted the reports.

Why aren’t DMARC reports appearing after setup?

Reports depend on participating receiving providers processing messages and submitting data. If reports do not appear, review the supplied DNS configuration and reporting destination. An empty dashboard alone does not confirm a configuration failure.

Does the dashboard show every email sent using my domain?

No. Aggregate reporting reflects data submitted by participating receiving providers. It provides visibility into reported activity rather than a complete message-by-message log of all email using your domain.

Does an Unknown Sender label mean the source is malicious?

An unfamiliar source could be an unauthorized sender or a legitimate service that needs investigation. Review its authentication results and compare it with your organization’s sending services before deciding what action to take.

What is the difference between p=none, p=quarantine, and p=reject?

p=none requests no change in message handling based on DMARC failure alone. p=quarantine asks receivers to treat failing messages as suspicious, such as placing them in spam. p=reject asks receivers to reject failing messages. Receiving providers make the final handling decision.

What should I review before changing DMARC enforcement?

Identify legitimate sending services, investigate failures, and resolve alignment issues affecting expected email. Review reports covering your normal sending activity before tightening the policy. There is no fixed timeline that suits every domain.

How does look-alike domain monitoring help identify possible impersonation?

It highlights domain names that resemble your monitored domain, alongside risk scores and available DNS signals. Use these findings to prioritize investigation. A similar name or elevated score alone does not confirm phishing.

How does DMARC monitoring help prepare for a VMC?

DMARC monitoring helps you identify reported sending sources and investigate authentication failures before changing enforcement. If you plan to buy Verified Mark Certificate, DMARC enforcement is part of preparing for BIMI logo display and Gmail’s blue checkmark. Your logo must also meet VMC eligibility requirements. Monitoring alone does not enable logo display.

Do I need DMARC enforcement for a CMC?

Yes. BIMI logo display with a CMC requires a DMARC policy of p=quarantine or p=reject. Businesses with an eligible established logo can get Common Mark Certificate without registering a trademark. A CMC supports logo display in supported inboxes but does not unlock Gmail’s blue checkmark.

Discuss Your Dmarc Requirements