Free DMARC Monitoringfor your domain

Can DMARC monitoring really be free?

Yes. The SimpleDMARC Free plan collects your DMARC reports and turns them into something you can read. You see who is sending email as your domain and whether it passes. It costs nothing, and you can upgrade if you outgrow it.

This page covers what Free includes, what it doesn't, whether free is enough for you, and how to start in about ten minutes.

What you get on the Free plan

• DMARC monitoring and aggregate (RUA) reports. Reports arrive as XML files nobody wants to read. We parse them for you.
• Spoofing detection. See sources that send as your domain without passing.
• 1 domain and 1 user.
• Compliance PDF export. Hand a report to a manager or auditor.
• 1 alert rule and 1 scheduled report.
• 14 days of report history and 256 MB of storage.
• Unlimited emails. The volume of mail you get reports about is not capped.

No credit card is needed to start.

What the Free plan does not do

Free is built to get you started, and it has limits. Knowing them now saves a surprise later.

• 1 domain. If you manage more, you need a paid plan. Starter covers 3 domains, Growth 10, Pro 25 and Business 100.
• 1 user. If a team needs to log in, Starter allows 4 users and Growth allows 11. Pro and Business have unlimited users.
• 14 days of history. That is enough to see what is happening, but short for planning enforcement. Starter keeps 90 days and Growth keeps a year.
• No forensic (RUF) reports or lookalike domain monitoring. These start on Starter.
• No hosted SPF or MTA-STS, and no API. These start on Growth.
• It won't fix your email for you. Monitoring shows the problem. Someone still has to correct SPF, DKIM and your sending services.

Is free DMARC monitoring enough?

For many people, yes. It depends on what you are trying to do.

Free is probably enough if:

• You have one domain
• You work alone, or one person owns email security
• You want to see what is happening before spending anything
• You are learning DMARC and want real data to practise on

You will likely want a paid plan if:

• You manage several domains and want them in one place
• More than one person needs access
• You are heading to enforcement and want more than 14 days of history to be sure nothing legitimate gets blocked
• You want SPF and MTA-STS managed for you
• You want to connect DMARC data to your own tools through the API

Nobody needs to decide today. Start free, look at your reports, and let the data tell you.

Free vs paid DMARC monitoring plans

	Free	Starter	Growth	Pro	Business
Price	$0	$86 / year	$182 / year	$374 / year	$758 / year
Domains	1	3	10	25	100
Users	1	4	11	Unlimited	Unlimited
Report history	14 days	90 days	1 year	2 years	3 years
Forensic (RUF) reports	No	Yes	Yes	Yes	Yes
Hosted SPF and MTA-STS	No	No	Yes	Yes	Yes
API access	No	No	Yes	Yes	Yes
BIMI support	No	No	No	Yes	Yes
SSO and audit logs	No	No	No	No	Yes

Starter, Growth, Pro and Business show current discounted annual prices (normally $108, $228, $468 and $948). Paid plans include a 14-day free trial. See the pricing page for the full comparison.

Get started in 10 minutes

1. Create a free account. Name and work email, no credit card.
2. Add your domain. We give you the DMARC record to publish.
3. Publish the record at your DNS provider. It is a TXT record at _dmarc.yourdomain.com. A starting record looks like this:

``_dmarc.yourdomain.com. IN TXT "v=DMARC1; p=none; rua=mailto:your-reporting-address@example.com"``

Use the exact rua= address SimpleDMARC gives you, not the placeholder above. p=none means "watch, don't block", so publishing it does not change how your email is delivered.

1. Wait for the first reports. Mailbox providers send aggregate reports on their own schedule, usually daily, so allow a day or two.
2. Open your dashboard. You will see which services send as your domain and which ones pass.

Not sure your record is right? Test it first with the free DMARC Checker.

From monitoring to enforcement

A record at p=none only watches. It doesn't stop anyone spoofing your domain. The goal is to move to p=quarantine and then p=reject once all your legitimate senders pass. The usual path:

1. Watch at p=none and list every service that sends as you.
2. Fix SPF and DKIM for each legitimate sender.
3. Enforce gradually: quarantine first, then reject.

Free covers step 1 and helps with step 2. Longer history and hosted SPF make steps 2 and 3 easier, which is the usual reason people upgrade. If you also want your logo in the inbox, enforcement is a requirement for BIMI. See BIMI certificates.