Stop anyone sendingemail as your business
We switch on full protection for your domain, step by step, so no real email is ever blocked, and we keep it that way. You make one DNS change. We do everything else. Fully protected in 90 days or you stop paying until you are.
Simple, per-account pricing
Per account, not per seat. Talk to us and we'll get you onto the right plan. Public-sector buyer? pay by invoice.
Reports
See everyone sending as your domains, and get alerted when anything changes.
- We read the reports other mail servers send about your domain, so you never have to
- Every system sending email as you, named and flagged if it should not be
- One DNS change at the start. We handle every change after that
- A simple dashboard: are we protected yet?
- A monthly PDF for your board, auditor or insurer
Managed
Done-for-you protection: we walk you safely to fully protected.
- Everything in Reports
- We switch protection on step by step, so no real email ever gets blocked
- All four email security standards set up and kept right
- Fully protected within 90 days, or you stop paying until you are
- Priority human support
Enterprise
Group structures, estates beyond five domains, and organisations that want our platform under their own brand.
- Everything in Scale
- Unlimited domains & group structures
- Named engineer, custom SLA & tailored onboarding
- White-label, board-ready reporting
- Partner API & integrations
- Annual invoicing available
The 90-day enforcement guarantee (Managed, Scale and Enterprise): if we have not walked your domain to enforced DMARC (p=reject) within 90 days of onboarding, for reasons within our control, your subscription is free from day 91 until we have. No small print beyond this sentence.
Not sure yet? Run the free security check first — no signup needed. Want a one-off report instead of a subscription? See the free check and the £50 Full Report.
Since 2024, Google and Yahoo have rejected or junked mail from bulk senders who fail the email checks. Microsoft joined in May 2025. Yet only about 1 in 11 of the world's busiest domains is properly protected. If yours is not, criminals can send email as you, and your own mail lands in spam. We fix both, without breaking a single real email.
We do the work. You get protected.
DMARC done properly is a project, not a checkbox. We run the whole journey for you and keep it healthy afterwards.
Point your reports at us
One small DNS change and your DMARC reports start flowing to us. Nothing to install, no access to your systems.
We find every sender
We read the reports and name every system genuinely sending email as you, and every impostor. You approve the list.
We switch protection on
We fix the records that prove your email is real, then turn protection up step by step, with safety checks so no real mail ever breaks.
We keep it healthy
We keep watching, the portal shows your live status, and a monthly report proves it. You stay protected without lifting a finger.
What you're actually paying for
Not a report you read yourself — a managed outcome, delivered by us.
Done-for-you protection
We take your domain safely to the one setting that actually stops impersonation, with a 90-day guarantee.
One DNS change, ever
We host and manage the protection record for you (hosted DMARC), so you never edit DNS or read a report again.
Every sender found
Every system sending as you, found and named, so nothing legitimate gets blocked when protection tightens.
Live portal & reports
A clear status portal and a monthly PDF for your board. If something slips, we catch it the same day.
Beyond the basics
Encrypted delivery enforced, and your verified logo shown next to your emails in Gmail and Apple Mail.
A team, not a dashboard
Priority human support and ongoing guidance. We do the work. You get the outcome.
More help as you go up
Managed DMARC is everything, done for you, ongoing.
| Feature | Reports | Managed | Scale | Enterprise |
|---|---|---|---|---|
| Visibility & analysis | ||||
| Your security score out of 100, section by section | check | check | check | check |
| Whether someone can send email as you, checked | check | check | check | check |
| We read the reports other mail servers send about your domain | check | check | check | check |
| Every system sending as you, named and flagged | check | check | check | check |
| Lookalike domains that could impersonate you, spotted | check | check | check | check |
| One DNS change at the start; we handle every change after | check | check | check | check |
| Reporting & monitoring | ||||
| A simple dashboard: are we protected yet? | check | check | check | check |
| A monthly PDF for your board, auditor or insurer | check | check | check | check |
| Watched all the time; an alert when something slips | check | check | check | check |
| A record of every change we make, available on request | check | check | check | check |
| White-label, board-ready reporting (your brand) | — | — | — | check |
| Getting protected (done-for-you) | ||||
| We take you to fully protected (a setting that rejects fake email) | — | check | check | check |
| Protection switched on step by step, so no real email breaks | — | check | check | check |
| The records that prove your email is real, fixed for you (SPF, DKIM) | — | check | check | check |
| Encrypted delivery set up and watched (MTA-STS, TLS-RPT) | — | check | check | check |
| Fully protected within 90 days, or you stop paying | — | check | check | check |
| Your logo shown next to your emails in Gmail and Apple Mail | — | — | check | check |
| Management & access | ||||
| Up to 3 domains (10 on Scale) | check | check | check | check |
| Unlimited domains & group structures | — | — | — | check |
| Unlimited portal users | — | — | check | check |
| Sign in with an emailed link, no password to lose | check | check | check | check |
| Service & support | ||||
| Priority human support | — | check | check | check |
| Ongoing managed service & guidance | — | check | check | check |
| A named specialist, with response times in writing | — | — | check | check |
| A named engineer, tailored onboarding, your own response times | — | — | — | check |
| Connect our platform to your own systems (API) | — | — | — | check |
Frequently asked questions
What organisations ask us most often about DMARC, email impersonation and managed protection.
What is DMARC, and why does it matter now?
It is the standard that stops criminals sending email that looks like it comes from your domain (DMARC). It also tells inbox providers what to do with mail that fails the check. Since 2024, Google and Yahoo require it for bulk senders, and Microsoft joined in 2025. Without it, your domain can be used in phishing and invoice fraud, and your own mail lands in spam more often.
Will tightening DMARC break our legitimate email?
Done carelessly, it can. That is exactly what we prevent. First we find every system that sends email as you. We make sure each one is set up properly. Only then do we tighten your policy, one safe step at a time, with your approval. Done properly, no real email is ever interrupted.
How is this different from a cheap tool or a free DMARC report?
Tools give you a dashboard and leave the work to you: reading reports, finding senders, fixing records, deciding when to tighten. We do all of that for you and take your domain all the way to full protection. You are paying for the outcome, not a report.
How long does it take to get fully protected?
Most domains get there within a few weeks. It depends on how many systems send email as you. On the Managed and Scale plans we guarantee it: fully protected within 90 days of onboarding, for reasons within our control, or your subscription is free from day 91 until you are. After that, we keep you protected with ongoing monitoring.
Do we need any technical knowledge?
No. That is the point of the managed service. You publish a couple of records we give you, or we work with your IT provider to do it. We handle everything else. A simple portal shows your live status at any time.
Get fully
protected
Talk to us and we'll get your domain protected and on its way to full protection, without breaking a single legitimate email.
Not ready? Run a free security check first. No sign-up needed.