KDmarc is a dedicated DMARC reporting and management platform, offering a comprehensive suite of tools for email authentication. We have found it provides granular insights into DMARC data, allowing users to analyze email flows and identify potential threats. Its dashboard presents a clear overview, helping us quickly assess compliance and authentication results.
The platform supports the full DMARC lifecycle, from initial monitoring to enforcement policies. It focuses on simplifying complex DMARC data into actionable intelligence, making it easier for organizations to achieve and maintain DMARC compliance. We appreciate its ability to track various authentication sources and highlight non-compliant email streams.
The Splunk TA-DMARC add-on is designed primarily for ingestion and basic parsing of DMARC reports within a Splunk environment. We have used it to bring DMARC data into our existing Splunk instances, leveraging Splunk's powerful search and correlation capabilities for analysis. It acts as a data connector, transforming XML DMARC reports into Splunk-friendly format.
However, it's important to note that this add-on provides raw data integration rather than a full-fledged DMARC reporting interface. Users need to build their own Splunk dashboards and alerts on top of the ingested data. This requires a solid understanding of Splunk and DMARC data structures, which we found can be a significant undertaking.
How easy is each product to use
User experience
We found KDmarc's user interface to be intuitive and designed with DMARC management in mind. The dashboards are clean, providing clear visualizations of DMARC compliance, authentication failures, and email sources. Navigating through reports and settings is straightforward, reducing the learning curve for new users.
Its focused design means that DMARC-related tasks, such as configuring records or analyzing specific report types, are easily accessible. We appreciate how it abstracts much of the underlying complexity of DMARC, presenting information in an easily digestible format. This allows us to quickly identify issues and make informed decisions without deep dives into raw XML.
Our experience with the Splunk TA-DMARC add-on indicates that the user experience is entirely dependent on the user's proficiency with Splunk. The add-on itself doesn't offer a graphical interface beyond its configuration within Splunk. Analyzing DMARC data involves crafting Splunk Search Processing Language (SPL) queries and building custom dashboards.
For those already proficient in Splunk, this approach offers immense flexibility in how data is presented and analyzed. However, for users less familiar with Splunk or DMARC data structures, there's a steep learning curve to gain meaningful insights. We found that creating effective DMARC visualizations and alerts requires significant effort and expertise, rather than an out-of-the-box solution.
Which product has the best support
Support
KDmarc provides dedicated customer support channels, which we found responsive and helpful for DMARC-specific queries. They offer assistance with onboarding, DMARC record configuration, and troubleshooting reporting issues. Their support model typically includes documentation, email support, and potentially live chat or phone options depending on the plan.
We appreciate that their team is knowledgeable about the nuances of email authentication and can guide users through complex DMARC scenarios. This direct line to DMARC experts is a significant advantage, particularly for organizations new to DMARC or facing challenging deliverability problems.
The Splunk TA-DMARC add-on is listed as "Not Supported" and "archived." We experienced firsthand that this means there is no official support provided by the developer. Users are left to rely on the general Splunk community forums or their internal Splunk experts for any issues or questions.
While the Splunk community is vast, finding specific DMARC-related solutions for this particular archived add-on can be challenging. This lack of dedicated support significantly increases the operational burden on users, requiring internal resources for maintenance, troubleshooting, and staying updated with DMARC best practices.
Who should use each product
Suitability
KDmarc is highly suitable for organizations of all sizes looking for a dedicated and streamlined DMARC reporting solution. For SMBs, its intuitive interface and managed approach reduce the technical overhead, making DMARC implementation accessible.
Enterprise clients benefit from its comprehensive reporting, scalability, and dedicated support, ensuring robust email security across complex environments. MSPs (managed service providers) can leverage KDmarc's platform to efficiently manage DMARC for multiple clients, providing a centralized view and simplified reporting.
The Splunk TA-DMARC add-on is best suited for organizations that already have a significant investment in Splunk and the internal expertise to manage it. It is generally not recommended for SMBs due to the high technical barrier and lack of out-of-the-box reporting.
Enterprise environments with strong Splunk teams can integrate DMARC data into their broader security information and event management (SIEM) strategy, but this requires substantial custom development. MSPs would find it very challenging to offer DMARC reporting as a service using this add-on due to its unsupported nature.
How does KDmarc compare with Splunk TA-DMARC add-on?
DMARC report analysis
Analysis of aggregate and forensic DMARC reports.
Requires custom Splunk queries and dashboards
Source detection
Identification of email sending sources.
Requires custom Splunk queries
Forward detection
Ability to identify email forwarding issues.
Requires manual correlation
Spoof detection
Detection of email spoofing attempts.
Requires custom Splunk alerts
Notifications and alerts
Automated alerts for DMARC issues.
Via Splunk's native alerting features
Reporting
Pre-built or custom DMARC reports.
Dedicated DMARC reports
Via custom Splunk dashboards
API
Programmatic access to DMARC data or features.
For platform integration
No DMARC-specific API
Multi-tenancy
Support for managing multiple domains/clients.
Built-in capabilities
Not designed for multi-client management
SPF flattening
Tools to manage SPF lookup limits.
Often included in DMARC platforms
Not a feature of the add-on
Hosted DMARC
Service for managing DMARC records.
Typically part of the service
Only data ingestion, not record management
BIMI
Support for Brand Indicators for Message Identification.
Often supported by dedicated platforms
No direct support
MTA-STS/TLS-RPT
Support for Mail Transfer Agent Strict Transport Security/TLS Reporting.
Often supported by dedicated platforms
No direct support
Blocklists and reputation
Monitoring of IP blacklists (blocklists) and sender reputation.
Provides insights
Out of the add-on's scope
AI copilot
AI-powered assistance for DMARC tasks.
DNS monitoring
Monitoring of relevant DNS records (DMARC, SPF, DKIM).
For DMARC, SPF, DKIM records
Not a feature of the add-on
Self hostable
Ability to host the solution on private infrastructure.
SaaS platform
Runs on self-hosted Splunk instance
Free trial/free tier
Availability of a free trial or a permanently free tier.
Usually offers a trial
Add-on is free, Splunk platform is not
Drawbacks and what to watch out for
KDmarc, while robust, may involve a learning curve for those unfamiliar with advanced DMARC concepts, and its pricing can scale with email volume. The Splunk TA-DMARC add-on, being archived and unsupported, presents significant challenges, including a lack of official support, the need for deep Splunk expertise, and no guaranteed future updates, making it a high-maintenance solution.
We have pulled the average ratings from G2 for each product, and also included the most recent negative reviews for each product in full. Positive reviews tend to have less detail and have a higher chance of being fraudulent, so negative reviews are a better signal for your decision.
0 / 5(0)
0 / 5(0)
Pricing
KDmarc typically offers tiered pricing based on email volume, whereas the Splunk TA-DMARC add-on is free but requires a paid Splunk instance.
Small
Up to 10k emails / month
Contact for pricing
Free, requires Splunk instance
Medium
Up to 100k emails / month
Contact for pricing
Free, requires Splunk instance
Large
Up to 1 million emails / month
Contact for pricing
Free, requires Splunk instance
Enterprise
Over 1 million emails / month
Contact for pricing
Contact for Splunk pricing
Suped hard sell incoming!
Still not satisfied with KDmarc or Splunk TA-DMARC add-on?