DomainCanary Start free

Product

What DomainCanary does

DomainCanary is a DMARC enforcement service that protects your domain from email spoofing without blocking your own mail.

Create your account Explore the features
  • You approve each enforcement step
  • The Monday digest, with same-day alerts on paid plans
  • 30 days on the Business plan, no card

Features

From your first report to full enforcement

On the Starter plan, change your DMARC policy from the dashboard and approve guided steps toward p=reject. With the Business plan, you also get hosted SPF, MTA-STS and checks for unused SPF senders and DKIM keys.

Every plan DMARC monitoring The Monday digest, every sender named with evidence, daily totals kept for life, and same-day alerts on paid plans. Paid plans Hosted DMARC Publish a CNAME and change the policy from the dashboard. Move it up or down in one save. Every plan Guided enforcement We propose each policy step from your reports. On the free plan you publish each step yourself, up to quarantine. On paid plans you approve each step to p=reject and we publish it through hosted DMARC, with automatic rollback under the conditions below. Business plan and up Hosted SPF Point your SPF record at us and add or remove senders from your dashboard. We flatten the record and refresh every sender's addresses each hour. Business plan and up Hosted MTA-STS We publish the record, host the policy file and keep its certificate current, with a testing mode before you enforce. Business plan and up DNS cleanup Which SPF senders and DKIM keys are still in use, judged from 90 days of your own reports.

Automatic rollback needs hosted DMARC, on the Starter plan and up. It acts during the report watch after a step. The usual watch is 3 days. We adjust it to match when your reports arrive, with at least 3 days for a step into reject.

How automatic rollback works
  • It acts when a sender already marked as yours has at least 20 messages at one receiving domain and at least 20 percentage points more of them quarantined or rejected than before the step.
  • We also roll back when reported quarantines or rejections of senders we saw before the step exceed the budget you set for it.
  • We act on daily reports. We can't recover mail already rejected.
  • If you edit the record during the watch and a rollback comes due, we keep your change, pause the ramp and email you.
  • After the watch ends, we send a same-day alert when a report shows a new failing sender. We don't roll back after the watch ends.

Plans

Priced by domains watched

Free

$0

1 domain. The digest and dashboard, with no expiry.

Starter

$19 /month

3 domains. Same-day alerts, guided enforcement and hosted DMARC.

Business

$49 /month

10 domains. One digest across your domains, hosted SPF, MTA-STS and cleanup checks.

Portfolio

$79 /month

25 domains. Everything in the Business plan, plus your company name on client digests.

Compare every plan and limit

Start with your domain's reports

Try every feature of the Business plan for 30 days, no card. Your first domain stays free.

Create your account