Is Splunk TA-DMARC add-on truly free to use?

The add-on itself is free and open-source under the MIT License. However, it requires a Splunk instance to run, which comes with its own licensing costs. So, while the add-on has no direct fee, the total cost involves your Splunk infrastructure.

Which product is better for an organization new to DMARC?

DMARC Report is generally more suitable for organizations new to DMARC. It offers a dedicated platform with guided setup, clear reports, and focused support, making the learning curve much gentler. The Splunk TA-DMARC add-on requires significant prior knowledge of Splunk, which can be daunting for DMARC newcomers.

Does Splunk TA-DMARC offer active DMARC policy enforcement or just reporting?

The Splunk TA-DMARC add-on is primarily for DMARC reporting and analysis. It helps you visualize and understand DMARC data, but it doesn't directly enforce DMARC policies or provide tools for active management (like updating DNS records for policy changes). Policy enforcement is handled by your DMARC DNS record.

Can MSPs use either product to manage multiple clients?

DMARC Report has specific MSP plans with multi-tenancy and white-labeling features designed for managing multiple client domains. The Splunk TA-DMARC add-on does not offer these multi-tenant capabilities directly, and its unsupported status makes it an unsuitable choice for MSPs who need reliable tools and support for their clients.

Which product offers better visibility into forensic reports (RUF)?

Both products can process forensic (RUF) reports. DMARC Report provides integrated visualizations for these reports within its platform. The Splunk TA-DMARC add-on ingests RUF data into Splunk, allowing for detailed querying and custom dashboard creation, offering deep visibility for Splunk power users.

DMARC Report vs Splunk TA-DMARC add-on

Choose DMARC Report for dedicated DMARC management, choose Splunk TA-DMARC for integrating DMARC data into existing Splunk infrastructure.

4.8 / 5(325)

Compare to Suped

0 / 5(0)

Compare to Suped

Compare product functionality

Feature set

DMARC Report is designed as a comprehensive DMARC management platform. It offers robust tools for parsing aggregate (RUA) and forensic (RUF) reports, providing clear visualizations of email authentication data. This allows for effective monitoring of email traffic, identifying legitimate sending sources, and detecting potential spoofing attempts.

Beyond core DMARC reporting, DMARC Report extends its capabilities to include features like MTA-STS hosting, TLS-RPT reporting, and BIMI record management. Its multi-tenancy options are particularly beneficial for Managed Service Providers (MSPs), enabling them to manage DMARC for multiple clients from a single dashboard. We appreciate its efforts to offer a holistic email authentication solution.

The Splunk TA-DMARC add-on focuses on integrating DMARC aggregate reports into a Splunk environment. Its primary function is to ingest DMARC XML reports, parse them, and make the data queryable and visualizable within Splunk dashboards. This is ideal for organizations already leveraging Splunk for security information and event management (SIEM) or log management.

While effective for consolidating DMARC data within Splunk, the add-on itself does not offer dedicated DMARC management features such as hosted DMARC records, SPF flattening, BIMI setup, or MTA-STS hosting. Its strength lies in its ability to centralize DMARC insights alongside other security logs, making it a powerful data integration tool rather than a standalone DMARC solution.

How easy is each product to use

User experience

DMARC Report generally offers a user-friendly experience, particularly for those new to DMARC. We found the step-by-step setup guides helpful for configuring DNS records. The dashboard provides clear visualizations and digestible reports, making it easier to understand email authentication status and identify issues at a glance.

However, some users, ourselves included, have noted that the user interface (UI) can feel a bit dated or clunky in certain areas. While functional, a more modern and fluid design could enhance the overall experience. Despite this, its ease of use for core DMARC tasks remains a strong point.

The user experience for Splunk TA-DMARC add-on is largely dependent on an existing familiarity with Splunk. If you are already proficient with Splunk, integrating and visualizing DMARC data through this add-on should be relatively straightforward. It leverages Splunk's native dashboards and query language, so there's no new interface to learn beyond Splunk itself.

For users unfamiliar with Splunk, there will be a significant learning curve. The add-on itself doesn't provide a simplified DMARC-focused interface, but rather feeds raw DMARC data into a powerful, albeit complex, analytics platform. The archived status also suggests that the UI might not be actively maintained or updated to newer Splunk standards, which could lead to minor inconsistencies.

Which product has the best support

Support

DMARC Report generally receives positive feedback for its customer support. We've experienced their team as responsive and helpful, particularly during the initial onboarding and setup phases. For MSPs, they offer 'white glove onboarding & assistance', which is a significant advantage for managing client accounts efficiently.

However, some users have reported instances where getting answers to highly specific or complex technical questions took longer than expected, with a perceived lack of a real-time chat option. While the support is generally good, this can be a point of friction for immediate, nuanced issues.

This is a critical area where the Splunk TA-DMARC add-on differs significantly. It is explicitly listed as "Not Supported" by the developer and is marked as "archived." This means there is no official support channel, no ongoing maintenance, and no guaranteed updates.

For organizations considering this add-on, it's essential to understand that all troubleshooting, maintenance, and potential future compatibility issues will fall to internal resources. While the open-source nature might allow for community-driven solutions, relying on an unsupported and archived tool for critical security functions carries inherent risks and requires significant in-house Splunk expertise.

Who should use each product

Suitability

DMARC Report is highly suitable for Small to Medium Businesses (SMBs) and Enterprises seeking a dedicated and user-friendly DMARC management platform. Its tiered pricing and comprehensive features, including hosted MTA-STS and BIMI, cater to various organizational sizes and their specific email authentication needs. It simplifies complex DMARC data, making it accessible even for those without deep technical expertise.

For Managed Service Providers (MSPs), DMARC Report stands out with its explicit MSP plans, multi-tenancy, and white-labeling options. This allows MSPs to efficiently manage DMARC for multiple clients, integrate DMARC services into their offerings, and provide customized reports, enhancing their service value and operational efficiency.

The Splunk TA-DMARC add-on is best suited for Enterprises that are already deeply invested in the Splunk ecosystem for their security operations and log management. It allows these organizations to centralize DMARC data within their existing Splunk environment, leveraging Splunk's powerful analytics and correlation capabilities alongside other security logs. It's a valuable integration piece for a mature SIEM strategy.

However, it is less suitable for SMBs or MSPs looking for a standalone DMARC solution, as it lacks dedicated DMARC management features and official support. MSPs, in particular, would find it challenging to offer DMARC services to clients using an unsupported add-on that requires an expensive Splunk license and significant in-house expertise to maintain.

How does DMARC Report compare with Splunk TA-DMARC add-on?

DMARC report analysis

Parsing and visualization of DMARC aggregate and forensic reports.

Source detection

Identifying legitimate and unauthorized sending sources.

Forward detection

Tracking emails forwarded by recipients.

Spoof detection

Identifying fraudulent emails attempting to impersonate your domain.

Notifications and alerts

Real-time alerts for policy changes or suspicious activity.

Via Splunk alerting features

Reporting

Customizable dashboards and automated report generation.

Via Splunk dashboards

API

Programmatic access to DMARC data and management features.

Available on Defender plan

Via Splunk's API

Multi-tenancy

Management of multiple client domains from a single account.

Dedicated MSP plans

Not a feature of the add-on

SPF flattening

Simplifying SPF records to avoid exceeding the 10-lookup limit.

Not a function of the add-on

Hosted DMARC

Service for creating and managing your DMARC DNS record.

Reporting only

BIMI

Support for Brand Indicators for Message Identification (BIMI).

Reporting only

MTA-STS/TLS-RPT

Support for SMTP TLS reporting and enforcement.

Reporting only

Blocklists and reputation

Monitoring for domain or IP blocklisting and sender reputation.

On MSP Armor plan

Not a primary feature

AI copilot

AI-driven assistance for DMARC policy management.

DNS monitoring

Monitoring DNS records beyond DMARC for health and security.

Focuses only on DMARC records via logs

Self hostable

Ability to host the software on your own infrastructure.

SaaS only

Add-on for self-hostable Splunk

Free trial/free tier

Availability of a free version or trial period.

Core Plan and trials

Add-on is free itself

Drawbacks and what to watch out for

DMARC Report's primary drawbacks revolve around aspects of its user interface, which some users find a bit outdated or clunky, along with occasional reports of slower support response times for highly specific issues. While generally functional, these minor irritations can affect the daily workflow. For the Splunk TA-DMARC add-on, the fundamental drawbacks are its unsupported and archived status, meaning no ongoing updates or official support, placing a full burden of maintenance and troubleshooting on the user. It also requires an existing Splunk installation, adding significant complexity and cost for those not already using the platform.

We have pulled the average ratings from G2 for each product, and also included the most recent negative reviews for each product in full. Positive reviews tend to have less detail and have a higher chance of being fraudulent, so negative reviews are a better signal for your decision.

4.8 / 5(325)

0 / 5(0)

Easy to setup and no errors

3.5 / 5

What do you like best about DMARC Report? Dmarc is critical to email deliverability and the tools they offer make it easier to set up than others I have tried. What do you dislike about DMARC Report? Still need a bit of technical skill to discern the forensic reports. What problems is DMARC Report solving and how is that benefiting you? Email Deliverability is critical to my business and DMARC report keeps me aware of issues with the authenticity of my site.

Nancy S.

Marketing Consultant Computer Software Small-Business (50 or fewer emp.)

No G2 reviews

G2 is the most popular review platform for DMARC products, so this is a strong signal that this product is not popular.

Easy configuration. Clear, easy to read reports.

4.0 / 5

What do you like best about DMARC Report? I find the whole SPF, DKIM, and DMARC configuration of email addresses to be thoroughly confusing. I have a technical bent, so I shouldn't be mystified, yet somehow I am. DMARC Report relieves most of this grief. The website has a clear, logical interface, so it's easy to find what I need. It tells me if I've misconfigured something. It sends me weekly reports of my deliverability stats, which are very easy to read. I'm not currently sending stuff out via mailing lists. I wanted to set up SPF, DKIM, and DMARC so I could be sure that my regular business email was getting delivered. DMARC Report has some advanced reporting of fancy threats that don't concern me yet, because my business is still small. What do you dislike about DMARC Report? The price is high for me, due to my business's small size. The pricing is geared for larger businesses. I hope to grow into needing that much capacity, but they're a bit of an ill fit for me at the moment. If your company is small and you use just one domain name, their Free plan might be all you need. I'm thinking of downgrading to that. What problems is DMARC Report solving and how is that benefiting you? I need the confidence that my email is configured properly to guarantee delivery. DMARC Report provides reports that are easy to read. I can see at a glance if I have a problem.

Ron B.

Owner Internet Small-Business (50 or fewer emp.)

DMARC Report is a must-have tool for elevating your email delivery

4.0 / 5

What do you like best about DMARC Report? It provides comprehensive insights into all messages sent from your domain, ensuring you have all the necessary information to maintain robust email security and improve deliverability. The detailed reports help identify and mitigate potential threats, making it an essential resource for any organization serious about email authentication. What do you dislike about DMARC Report? Support on a very specific question I had regarding my hosting business was hard to get answered. What problems is DMARC Report solving and how is that benefiting you? As described it is showing all messages that are being send from your domain.

Verified User in Computer Software

Small-Business (50 or fewer emp.)

A Solid DMARC Management Experience

4.0 / 5

What do you like best about DMARC Report? My team and I enjoy the simplicity and effectivity of DMARC Report- it just works. Options are easy to find, the platform does exactly what it says it will do, and the value generated is great. Multi-Tenant capabilities are also a huge plus. What do you dislike about DMARC Report? The user interface needs a little work. I'd like it to ideally be a little more fluid, modern, and polished. It's not a deal breaker and is highly usable, but a touch up would be appreciated. What problems is DMARC Report solving and how is that benefiting you? Managing our clients DMARC can be chaotic and time consuming- this makes it easy putting everything in a clean easy report with tons of options for us to easily manage and configure our client's DMARC and other DNS settings.

Anthony R.

CEO Small-Business (50 or fewer emp.)

Cost-effective and useful solution for DMARC report parsing

4.0 / 5

What do you like best about DMARC Report? Comprehensive email security solution with DMARC reporting, TLS, and more. What do you dislike about DMARC Report? It can be confusing to navigate the menus and occasionally it resets to the default domain. What problems is DMARC Report solving and how is that benefiting you? DMARC reports are largely unreadable to humans, and a parser is a must. DMARC Report has been great for both my own and my clients' domains, providing easy to digest reporting and giving insights into authentication problems as well as spoofing.

MV B.

Founder Small-Business (50 or fewer emp.)

Pricing

DMARC Report offers clear, tiered pricing with a free plan and various paid options scaling by message volume and features, while the Splunk TA-DMARC add-on is technically free but requires a separate, often costly, Splunk license.

Small

Up to 10k emails / month

Free (Core Plan)

Free (requires Splunk)

Medium

Up to 100k emails / month

$25/month (Guard Plan up to 250k)

Free (requires Splunk)

Large

Up to 1 million emails / month

$75/month (Shield Plan)

Free (requires Splunk)