Protect every client's email domain from one account.
Anyone can send email that looks like it came from a client's domain until that domain has a DMARC policy of reject. Add your clients' domains from a spreadsheet and see which ones are unprotected today. Then tighten each policy with changes you approve, and send each client a report with your name on it.
Create your account See the plans
14 day trial · No card · Import by CSV or API
Add a client's domains by pasting a list
Paste domain,client lines or drop in a CSV. Before anything
is added, the preview shows the DMARC record each domain publishes today, so you see
which clients have no protection at all. We create the clients as the domains are
added.
Check a whole list first
The bulk check reads the DMARC record of every domain on a list you paste and gives you the results as a table or a CSV. It works during the trial and on every paid plan, and you can send its list straight into the import.
Keep your current DMARC tool while you try ours
A DMARC record can list more than one reporting address. The preview marks the domains that already report to another service, and you add our address beside theirs.
A change request for whoever holds DNS
Each client gets a list of the records to publish and a plain-text change request you can paste into a ticket. The request lists each record and where to publish it.
An API for your own scripts
List domains, add domains to a client, and read the records a domain
needs, at /api/v1/domains. The API refuses the same domains the
import form would.
Keep each client's domains, people and email separate
Domains are grouped by client. Your dashboard lists every client with the least protected first, and each client's page shows only their domains.
Members who see one client
Invite a technician, or the client's own IT contact, as a member who sees one client's domains and nothing else. This comes with the Business plan and up.
A weekly email for the client, if they want it
You turn it on for each client. Their contact confirms from a link, then gets one weekly email covering their domains. You keep getting yours.
Alerts the day a sender starts failing
When a server that has never sent as a client's domain appears and fails, we email you the day its first report arrives.
History you can show an auditor
Every policy change keeps the record before and after, and we keep daily totals for each sender for the life of the account.
Send each client a report with your name on it
Each client has a share link to a report prepared under your brand name. It lists their domains with the least protected first. Each domain shows whether it has no record, a broken one, monitoring only, or enforcement, with its last 30 days of numbers and one finding with the action to take.
The page carries none of our navigation. When you rotate the link, the old one stops working at once. The client report comes with the Business plan and up.
Move each client to reject without blocking their mail
Guided enforcement proposes each policy change when that domain's reports show it is safe, and you approve it before we publish it. With hosted DMARC, the client's DNS holds one CNAME, you change the policy from your dashboard, and we put the previous policy back automatically if a change starts blocking their mail. Hosted SPF works the same way for the senders in their SPF record.
Priced by the domains you watch
The Business plan is $49 a month for 10 domains, with clients, client-scoped members, the client report and every hosted record. The Portfolio plan is $79 a month for 25 domains, then $4 a month for each extra domain. Every Business feature is free for 14 days, no card.
Where to go next
Questions people ask first
Can I try it with real client domains before paying?
Yes. Every account gets 14 days of the Business plan with no card, which covers 10 domains. When the trial ends, your account goes back to the free plan and we delete nothing.
A client already sends DMARC reports to another service. Can I add them anyway?
Yes. A DMARC record can list more than one reporting address, so you add ours beside the one that is there and both services receive the reports. The import preview shows which domains already report somewhere.
I don't control my clients' DNS. How do I get the records published?
Each client has a list of the records to publish, and a plain-text change request you can paste into a ticket for whoever holds their DNS. The request lists each record and where to publish it, and states that nothing in it changes how mail is sent or received.
Can a client, or one of my technicians, see only one client's domains?
Yes, on the Business plan and up. A client-scoped member sees one client's domains and nothing else.
Does the client get email from you?
Only if you switch it on for that client and their contact confirms from a link we send them. They then get one weekly email covering their domains, and you keep getting yours. They can decline or unsubscribe at any time.
What does it cost with more than 25 domains?
The Portfolio plan is $79 a month for 25 domains, then $4 a month for each extra domain. For 100 domains or more, write to contact@domaincanary.com for a quote, with invoice billing and a named contact.
Start with the clients you worry about most
Create an account, paste their domains, and the preview shows where each one stands before you change anything.
First domain free · 14 days of every paid feature · No card
- Import by CSV, paste or API
- A change request for whoever holds the client's DNS
- Policy changes you approve, with automatic rollback on hosted DMARC
- A client report with your name on it