About DomainCanary

What it does

Gmail, Microsoft, Yahoo and the rest already send you a report every day about who's sending mail as your domain. Hardly anyone reads them. They're XML, they arrive one per provider per day, and the senders in them are IP addresses.

We read them for you. Point your DMARC record at us and every Monday you get one email: who sent as your domain last week, whether they passed, and the one thing to fix next. On a paid plan, a new sender that fails gets its own email the same day.

Your first domain is free. The pricing page has the rest.

Fewer DNS edits

Paid plans also move DNS records onto a page you can change from your browser:

• Hosted DMARC: one CNAME, then you change your policy from the dashboard.
• Hosted SPF: one include, then you add and remove senders from a list.
• Hosted MTA-STS: two CNAMEs. We serve the policy and keep the certificate current.

And because the reports list every sender, DNS cleanup shows you which SPF includes and DKIM keys are still in use and which ones you can drop.

Free, no account

Eight tools check and write DMARC, SPF and DKIM records, or read a report you paste in. The guides get you from p=none to p=reject without breaking anything on the way.