Valimail offers a robust suite of features designed for comprehensive DMARC management and enforcement. Its core strength lies in automated SPF and DKIM alignment, effectively handling the complexities of email authentication for us.
We found that Valimail excels at identifying legitimate sending sources and quickly moving domains to an enforcement policy (quarantine or reject). It also provides detailed dashboards and reporting to give us visibility into email traffic and potential threats, alongside features for BIMI implementation.
DMARC-SRG, as an open-source PHP script, provides foundational DMARC report parsing and aggregation. We appreciate its straightforward approach to converting raw XML DMARC reports into human-readable summaries, which is its primary function.
The feature set is focused on basic reporting, offering insights into pass/fail rates for SPF and DKIM. While it provides the data needed for manual analysis, it lacks advanced features such as automated enforcement, SPF flattening, or proactive threat intelligence, which we would expect from a commercial solution.
DMARC-SRG
How easy is each product to use
User experience
DMARC-SRG
Valimail boasts a highly intuitive and user-friendly interface, which we found simplifies the often-complex world of DMARC. The dashboards are well-organized, providing clear visual summaries of email authentication status, making it accessible even for users less familiar with DMARC intricacies.
Setting up domains and configuring policies is guided through the platform, reducing the learning curve. However, some advanced features or granular data drill-downs can sometimes feel less streamlined, requiring a bit of digging to find specific information.
The user experience for DMARC-SRG is fundamentally different, as it is a self-hosted script rather than a cloud-based platform. We found that deploying and configuring it requires a solid understanding of PHP, web servers, and command-line operations, which presents a steeper learning curve.
Once set up, the interface for viewing reports is functional but basic, focusing on presenting aggregated data without advanced interactive elements or guided workflows. It's more about raw data presentation than a polished, managed user experience.
DMARC-SRG
Which product has the best support
Support
DMARC-SRG
Valimail offers comprehensive customer support, including onboarding assistance, a knowledge base, and dedicated account managers for higher tiers. We experienced prompt and helpful responses from their support team when navigating initial setup or more complex configurations.
The availability of technical account managers (as an add-on) and the Valicare services demonstrate a commitment to guiding users through DMARC enforcement, which is a significant advantage for organizations seeking hands-on help and expertise.
As an open-source project, DMARC-SRG primarily relies on community support. We found that official support channels are limited to the GitHub repository's issue tracker, where users can report bugs or seek help.
There are no dedicated support teams, account managers, or extensive knowledge bases beyond the project's documentation. Users must be self-reliant or have in-house technical expertise to troubleshoot and maintain the solution, which is a common characteristic of open-source tools.
DMARC-SRG
Who should use each product
Suitability
DMARC-SRG
Valimail is best suited for organizations that prioritize automated DMARC enforcement and require a managed service to achieve compliance quickly and effectively. Its robust feature set and dedicated support make it ideal for Enterprise clients with complex email ecosystems, multiple domains, and a need for strong email security.
For MSPs, Valimail offers tools and potentially multi-tenancy capabilities to manage DMARC for their clients. While its 'Monitor' plan offers a free starting point for SMBs, the full enforcement features are geared towards larger organizations willing to invest in a comprehensive solution.
DMARC-SRG is an excellent choice for technically proficient users, small businesses (SMBs) with limited budgets, or MSPs managing their own DMARC reporting infrastructure. Its open-source nature means the software itself is free, appealing to those who prefer to host and control their data.
However, its suitability diminishes for large enterprises or those lacking the technical resources for self-hosting, setup, and ongoing maintenance. MSPs might integrate it into their custom solutions, but it's not a ready-to-use, white-label product for client DMARC management without significant customization.
DMARC-SRG
How does Valimail compare with DMARC-SRG?
DMARC-SRG
DMARC report analysis
Aggregating and interpreting DMARC aggregate (RUA) and forensic (RUF) reports.
Automated, detailed, and visually presented reports
Parses XML into summarized, raw reports
Source detection
Identifying legitimate and unauthorized email sending sources.
Automatically identifies and categorizes sources
Provides source IPs in reports for manual identification
Forward detection
Ability to detect and handle forwarded emails.
Sophisticated forwarding detection
Data available in raw reports, requires interpretation
Spoof detection
Identifying and mitigating email spoofing attempts.
Automated detection and enforcement to block spoofing
Provides data, but no automated enforcement
Notifications and alerts
Real-time alerts for DMARC failures or policy changes.
Configurable smart alerts for various events
No built-in alert system; requires custom scripting
Reporting
Generating various types of reports on email authentication.
Comprehensive, downloadable, and executive reports
Summary reports from parsed DMARC data
API
Programmatic access to DMARC data and management functions.
API access available in Enterprise plans
Not applicable, as it's a self-hosted script
Multi-tenancy
Support for managing multiple clients or organizational units.
Supports managing multiple domains/portfolios
Can be configured to handle multiple domains, but not a true multi-tenant platform
SPF flattening
Automatically managing SPF records to stay within the 10-lookup limit.
Unlimited SPF lookups handled automatically
Does not offer SPF flattening functionality
Hosted DMARC
Cloud-based DMARC management and reporting service.
Fully hosted and managed cloud service
Requires self-hosting on your own infrastructure
BIMI
Support for Brand Indicators for Message Identification.
Amplify add-on for BIMI implementation
No native support or tools for BIMI
MTA-STS/TLS-RPT
Support for secure transport protocols.
Not explicitly offered or integrated
No support for these protocols
Blocklists and reputation
Monitoring email blocklists (or blacklists) and sender reputation.
Not a primary feature focus
No direct blocklist monitoring
AI copilot
AI-powered assistance for DMARC management.
Uses machine learning for threat detection
No AI capabilities
DNS monitoring
Monitoring DNS records relevant to email security.
Monitors relevant DNS records for changes
Relies on external DNS and DMARC record configuration
Self hostable
Ability to host the software on your own servers.
Cloud-only service
Designed for self-hosting
Free trial/free tier
Availability of a free version or trial period.
Free 'Monitor' plan for visibility
Open-source software is free to use
Drawbacks and what to watch out for
Valimail, while powerful, comes with the notable drawback of its cost, which can be prohibitive for smaller organizations. There are also concerns about potential vendor lock-in due to its comprehensive management of DNS records. Some users also report that certain advanced features might not be as developed as competitors, or that reporting could lack finer details.DMARC-SRG's main drawbacks stem from its open-source, self-hosted nature. It requires significant technical expertise for setup and ongoing maintenance, and it lacks the automated enforcement and sophisticated analysis tools found in commercial platforms. Without dedicated support, users are entirely responsible for their own troubleshooting and security.
We have pulled the average ratings from G2 for each product, and also included the most recent negative reviews for each product in full. Positive reviews tend to have less detail and have a higher chance of being fraudulent, so negative reviews are a better signal for your decision.
4.6 / 5(421)
DMARC-SRG
0 / 5(0)
Easy DMARC Monitoring But Not Great
3.5 / 5
What do you like best about Valimail?
Valimail is pretty simple to setup and use. We were wanting to monitor some changes to DMARC, and Valimail was the platform we ultimately decided to use.
What do you dislike about Valimail?
A few things I don't like:
1. The free vs premium features are frustrating. I can't see enough value from free to validate a move to premium.
2. The Sender Requirement Failure feature is in beta and never really works. I can't only get it to work if I expand it before a week, and even then it's hit-or-miss.
3. It doesn't really do enough. Other platforms I've tried did a better job at helping to explain the WHY and HOW rather than just the what. Valimail primarily focuses on the WHAT.
4. Some of the feature organization is weird within the app, even after having used it for a few months. I can get more value in the account overview than the sender requirements failure, which is counter-intuitive IMO.
What problems is Valimail solving and how is that benefiting you?
We had a baselevel view of email security when I was initially hired and wanted to monitor the DMARC changes effectively.
Verified User in Construction
Small-Business (50 or fewer emp.)
No G2 reviews
G2 is the most popular review platform for DMARC products, so this is a strong signal that this product is not popular.
I like Valimail - mostly.
3.5 / 5
What do you like best about Valimail?
Good interface for viewing DMARC reporting information.
What do you dislike about Valimail?
Price, it'd be nice if they could institute a model based on volume rather than the number of email domains.
What problems is Valimail solving and how is that benefiting you?
Valimail provides DMARC provides good aggregate reporting for our email domains, allowing us to implement to the eventual reject policy goal.
Verified User in Real Estate
Mid-Market (51-1000 emp.)
Valimail Simplifies DMARC Management, But Watch for Vendor Lock-In
4.0 / 5
What do you like best about Valimail?
My favorite thing about Valimail is having a single portal that puts all DMARC reports into an easy to understand view. Having this information allowed us to identify hundreds of 3rd party email sources sending on behalf of our domain. Doing this without such a portal would be incredibly difficult especially in a franchise setting like ours where we have more services sending on behalf of our domain than most other companies.
What do you dislike about Valimail?
Valimail isn't cheap but you definitely get what you pay for. I also grow concerned about vendor lock-in now that I have setup Valimail to handle DMARC, SPF and DKIM with no exist strategy.
What problems is Valimail solving and how is that benefiting you?
Valimail solves the problem of visibility into who is sending on our behalf and makes identifying them easy.
Verified User in Non-Profit Organization Management
Mid-Market (51-1000 emp.)
Intuitive Interface, Excellent Support
4.0 / 5
What do you like best about Valimail?
I love the intuitive interface and quick setup of VolleyMail, especially for DMARC, SPF, and various configurations. The strong DMARC management is very effective. I also appreciate the strong customer support, as they are friendly, approachable, and respond promptly whenever we have issues.
What do you dislike about Valimail?
I find the cost of paid plans to be challenging, as they seem to be quite high. There are reporting limitations that restrict the effectiveness of our operations. Additionally, there are feature gaps such as the absence of manual DKIM key management, advanced failure insights, and role-based access control, which hinder our ability to fully utilize the software.
What problems is Valimail solving and how is that benefiting you?
I find the product provides effective DMARC management and has strong customer support, making it quick and easy for configurations like DMARC, SPF, and DNS management.
Anish N.
Automatic DMARK Deployment
4.0 / 5
What do you like best about Valimail?
fully automated solution for DMARK Enforcement and zero manual DKIM Management.
What do you dislike about Valimail?
Limited customization and control. Pricing isn't being published openly
What problems is Valimail solving and how is that benefiting you?
Discovering all 3rd party and internal email sources and providing an inventory dashboard showing which sources are compliant SPF/DKIM and which are not
Riyad R.
Senior Security Engineer Enterprise (> 1000 emp.)
Pricing
Valimail offers tiered pricing with a free monitoring plan and paid enforcement options, whereas DMARC-SRG is open-source and thus free for the software, requiring self-hosting costs.
DMARC-SRG
Small
Up to 10k emails / month
Monitor (Free), Align ($19/month, billed annually, up to 500k emails)
Free (self-hostable script)
Medium
Up to 100k emails / month
Enforce Starter (starts at $5,000/year, contact for pricing)
4.6 / 5(421)
