The DMARC monitoring platform your team will actually read

DMARC monitoring helps to prevent email spoofing and improve email deliverability. DMARC reports parsed, sources classified, alerts routed to the right people. Suped is the DMARC monitoring platform that gives you the full picture, in one place.

Get started

Stop manually analyzing
DMARC reports

Suped ingests raw DMARC XML reports and turns them into clear, actionable insights so you can focus on fixing problems, not decoding data.

google.com!yourdomain.com!1712966400.xml

<?xml version="1.0" encoding="UTF-8"?>
<feedback>
  <!-- Report Metadata -->  <report_metadata>
    <org_name>google.com</org_name>
    <email>noreply-dmarc-support@google.com</email>
  </report_metadata>
  <!-- Policy Evaluated -->  <record>
    <row>
      <source_ip>209.85.220.69</source_ip>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>pass</spf>
      </policy_evaluated>
    </row>
  </record>
</feedback>

enterprise.protection.outlook.com!2024-04-12.xml

<?xml version="1.0" encoding="UTF-8"?>
<feedback>
  <!-- Report Metadata -->  <report_metadata>
    <org_name>Microsoft Corp.</org_name>
    <email>dmarcreport@microsoft.com</email>
  </report_metadata>
  <!-- Policy Evaluated -->  <record>
    <row>
      <source_ip>40.107.220.11</source_ip>
      <policy_evaluated>
        <disposition>quarantine</disposition>
        <dkim>fail</dkim>
        <spf>pass</spf>
      </policy_evaluated>
    </row>
  </record>
</feedback>

yahoo.com!yourdomain.com!1713052799.xml

<?xml version="1.0" encoding="UTF-8"?>
<feedback>
  <!-- Report Metadata -->  <report_metadata>
    <org_name>Yahoo! Inc.</org_name>
    <email>postmaster@dmarc.yahoo.com</email>
  </report_metadata>
  <!-- Policy Evaluated -->  <record>
    <row>
      <source_ip>98.137.11.23</source_ip>
      <policy_evaluated>
        <disposition>reject</disposition>
        <dkim>fail</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
  </record>
</feedback>

amazon-ses!yourdomain.com!1713139199.xml

<?xml version="1.0" encoding="UTF-8"?>
<feedback>
  <!-- Report Metadata -->  <report_metadata>
    <org_name>Amazon SES</org_name>
    <email>dmarc-support@amazon.com</email>
  </report_metadata>
  <!-- Policy Evaluated -->  <record>
    <row>
      <source_ip>54.240.27.18</source_ip>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>pass</spf>
      </policy_evaluated>
    </row>
  </record>
</feedback>

Suped

Emails

630,561

Authorized

478,100

Rejected

134,231

Quarantined

18,230

Delivered78.7%

DMARC compliance94.9%

SPF pass94.9%

DKIM pass92.3%

14 Mar

19 Mar

24 Mar

29 Mar

3 Apr

8 Apr

SourceEmailsSPFDKIM

Mailchimp

148,230passpass

HubSpot

52,410passpass

Salesforce

31,890passfail

SendGrid

24,650passpass

Google Workspace

18,320passpass

Zendesk

8,410failpass

What is DMARC monitoring?

DMARC monitoring is the practice of collecting authentication reports from mailbox providers like Google, Microsoft, and Yahoo to see every source sending email from your domain.

A DMARC monitoring tool like Suped parses these reports, identifies which senders are passing SPF and DKIM, and alerts you when authentication fails. Before reports arrive, you can use the DMARC checker to validate DNS, the DMARC record generator to create a policy, and the domain health checker to audit DMARC, SPF, and DKIM together.

Parses aggregate and failure reports from every reporter
Classifies every sending source with context
Tracks SPF and DKIM alignment across your volume
Alerts the right people when failures cross your threshold
Stores historical data so you can tighten policy with confidence

Reports

Sources

Alignment

Alerts

Policies

History

A command center for your DMARC monitoring

Real-time visibility

Every aggregate report from every reporter, parsed and stitched into one live view. Suped supports legacy DMARC reports and updated DMARCbis report fields (RFC 9990). Our DMARC monitoring tool shows which senders are passing, which ones are failing, and exactly where the gaps are. No XML wrangling, no spreadsheet exports, no guesswork.

Get started

"This clarity allows us to take action faster whether it's adjusting content, fixing authentication, or addressing reputation issues. We've moved from reactive guesswork to proactive management."

John Porteous

Group IT Manager

Alerts that only fire when it matters

Smart notifications

Set a failure threshold and we'll only email you when it's crossed. No noisy daily digests for healthy domains. When something genuinely breaks, the right people hear about it fast, with the source, the volume, and the disposition spelled out.

Get started

"Suped gives us a clear view across our domains. We can keep full enforcement in place, monitor seasonal senders, and maintain confidence in the email services our teams rely on."

Senaka Mapa

Manager IT Operations and Infrastructure

Stop reading XML. Start fixing what matters.

Connect your domain in minutes and let our DMARC monitoring service handle the parsing, the categorising, and the alerting.

Get started

Everything you need from a DMARC platform

Every feature here exists because someone got woken up at 3am by a spoofing alert that turned out to be a forwarding rule.

Threshold exceeded

DMARC failures at 12.4% from 3 sources

Real-time threshold alerts

Email notifications fire the moment DMARC failures cross the percentage you set.

mailgun.org

Authorized

fwd.example.com

Forward

165.22.45.10

No rDNS

Automatic source classification

Forwards, security products, no-rDNS senders. Every source labelled with context, not just an IP.

Hosted DMARC via CNAME

Manage your policy from the dashboard with a single CNAME. No more DNS edits to roll out a change.

Learn more

p=nonep=quarantinep=reject

Policy staging

Move from p=none to quarantine to reject in safe steps, with full visibility on the way.

Weekly DMARC summary

DMARC summary reports

Weekly or monthly digests delivered straight to your inbox, with everything you need to know at a glance.

SPF

100%

DKIM

98.2%

DMARC

98.2%

SPF and DKIM alignment

Both protocols tracked and visualised so you know exactly which sender breaks alignment, and why.

Automated DMARC means more time, less errors and faster results

Become DMARC compliant to stop landing in spam and protect yourself from impersonation attacks, automatically with no expertise.

The manual way

Experts only
Parsing raw XML aggregate reports (RUA)
Endless spreadsheet analysis
Complex DNS syntax management
No alerts for new threats
Reactive troubleshooting
Manually cross-referencing IP addresses
Lacks historical trend data

Automated DMARC

Automated with Suped

Everything you need for enterprise-grade DMARC management.

No expertise required
Real-time visual reporting
Proactive threat monitoring
Automated sender verification
Automated parsing and sender categorization
Guided steps to fix DMARC, SPF and DKIM issues
Continuous monitoring of authorized senders
Less than 90 days to enforcement vs 12+ months manually

Get started

DMARC monitoring FAQs

You have questions about DMARC monitoring, we have answers.

It collects DMARC aggregate reports from every mailbox provider that sends them (Google, Microsoft, Yahoo, and dozens more), parses the XML, and shows you a unified view of every source sending email from your domain along with whether SPF and DKIM are aligning correctly.

About five minutes. You add a single TXT record at your DNS provider pointing reports at our processing address, and reports start flowing in within a day or two as providers send their first aggregates.

Only one record. We add ourselves as a reporting address in your DMARC TXT record. Your existing SPF, DKIM, and policy stay untouched. If you upgrade to hosted DMARC, you swap your DMARC record for a single CNAME and manage everything from the dashboard.

Aggregate (rua) reports from every reporter, plus failure (ruf) forensic reports where providers send them. Both are parsed, deduplicated, and categorised by sender, IP, and disposition.

Yes. Suped supports the updated DMARC record tags defined in RFC 9989 and aggregate report fields introduced in RFC 9990, alongside legacy DMARC reports. Keep using your existing Suped reporting address as mailbox providers adopt the updated standards. Read the aggregate reporting specification

You set a failure threshold as a percentage of your daily volume. When a sender or domain crosses it, we email the recipients you've configured with the source, volume, and disposition spelled out. No fixed daily digests, no noise.

Monitoring shows you what's happening. Hosted DMARC lets you change your policy (none, quarantine, reject) from the dashboard via a CNAME, instead of editing DNS every time. Use reports to fix legitimate senders before tightening policy. The legacy pct tag is removed in the updated DMARC specification (RFC 9989), so percentage rollouts should not be relied on with updated receivers.

Plans start free for small domains and scale by sending volume. See the pricing page for the full breakdown. View pricing

Between 14 and 90 days depending on the plan. Enterprise plans have the ability to retain data for longer periods. All historical data is queryable from the dashboard.