Domain Security
See who's sending as your clients— and stop them.
DMARC monitoring + email authentication for every domain you manage. Identify every sender, walk each domain to full enforcement with guided readiness, catch failures as PSA tickets, and hand clients a white-label report. Per-domain pricing — your first domain is free.
First domain free forever. $25/mo covers up to 10 domains, then volume bands down to $1.25/domain. Month-to-month, cancel anytime.
01—What you get
From raw reports to full enforcement
Aggregate-report ingest
Point a domain's DMARC rua at us. We parse the daily reports (gzip, zip, or raw XML), dedup, and store them — no DNS gymnastics.
Sender identification
Every sending source resolved to a recognizable service — Google Workspace, Microsoft 365, Mailchimp, SendGrid — not a bare IP.
Enforcement readiness
Guided walk from p=none → quarantine → reject. We tell you when it's safe to tighten and print the exact record to publish next.
Live DNS posture
DMARC, SPF (10-lookup limit), DKIM, MX — plus the full stack: MTA-STS, TLS-RPT, and BIMI readiness once you reach enforcement.
Authorize / spoofer classification
Mark each source as authorized or a spoofer. Spoofers drop out of the readiness math so they never block your path to reject.
Alerts → PSA ticket
A new unauthenticated sender or a pass-rate drop fires an email and a ticket (generic webhook or native Atera). No alert storms.
02—How it compares
Per-domain, with a free tier and no minimum.
| Domain Security | EasyDMARC | Dmarcian | |
|---|---|---|---|
| Pricing model | Per monitored domain, 1 free forever | Per domain + email volume | By message volume |
| Entry price | $0 (1 domain), then $25/mo covers 10 | ~$36/mo (2 domains) | ~$24/mo (basic) |
| Free tier | 1 domain, perpetual | Limited free / trial | Limited free |
| Enforcement guidance | Guided readiness + exact next record | Yes | Yes |
| White-label client PDF | Included — monthly, auto-emailed | Higher tiers | Limited |
| Failure alerts → PSA ticket | Email + webhook + native Atera | Via integrations | — |
| Contract | Month-to-month, cancel anytime | Annual options | Annual options |
Competitor pricing approximate, accurate as of 2026.
03—FAQ
Questions
How does the free tier work?
Your first monitored domain is free, forever — full features, no time limit and no card to start. When you add a second domain you move onto the paid plan ($25/mo covers up to 10 domains), with per-domain bands beyond that.
How do I set a domain up?
Add the domain in the dashboard; it reveals a reporting address like dmarc+<token>@dmarc.redteamtrust.com. Put that in the domain's DMARC rua record, and aggregate reports start flowing in within a day. No agent, no DNS delegation.
What does 'enforcement readiness' actually do?
DMARC's value only kicks in at p=quarantine or p=reject — but tightening too early breaks legitimate mail. We watch your alignment over time and tell you exactly when it's safe to advance, list any sender still failing, and print the precise DMARC record to publish next.
What's the white-label report?
A branded PDF — your logo, your colors — summarizing a domain's senders, pass rate, enforcement progress, and DNS posture. Download on demand, or have it auto-emailed to the client monthly.
Do alerts integrate with my PSA?
Yes. New unauthenticated senders and pass-rate drops fire to a generic webhook (point it at ConnectWise / Rewst / Zapier) and, if you use Atera, open a native ticket that auto-closes on recovery.
Is there a contract?
No. Month-to-month, cancel anytime; annual billing saves 10%. The first domain stays free regardless.
Start with one domain, free.
Add a domain, drop in the reporting address, and watch the senders roll in. Add more whenever you're ready — and only then do you pay.
Already have an account? Subscribe from your billing page →