Hosted SPFUnlimited Senders
Overcome the 10-lookup limit that breaks email authentication. SimpleDMARC's hosted SPF flattens your record using macros, so you can authorize unlimited senders without ever touching DNS.
Why SPF Breaks
90%+ phishing attacks use domain spoofing or impersonation.
Inbox providers (Google, Microsoft, Yahoo) require DMARC.
One spoofed email can cause financial fraud, data loss, and reputation damage.
The 10-Lookup Limit
SPF allows only 10 DNS lookups. Every include:, a:, and mx: mechanism counts. Most organizations exceed this limit within months of setup.
Nested Includes Multiply
A single include for Google Workspace already uses 4 lookups. Add SendGrid, Salesforce, and HubSpot — you're over the limit before you know it.
PermError Means Rejection
When your SPF record exceeds 10 lookups, receiving servers return PermError. Your legitimate emails fail authentication and may land in spam — or be rejected entirely.
How Lookups Add Up
Fix SPF in Four Steps
From broken SPF record to unlimited senders in minutes.
Add Your Domain
We analyze your existing SPF record and identify all current senders and lookup usage.
Delegate via CNAME
Replace your SPF TXT record with a single CNAME pointing to our infrastructure.
Manage From Dashboard
Add or remove senders, reorder priorities, and see real-time lookup counts — all without DNS.
Stay Protected
We continuously flatten and optimize your record. Provider IP changes are handled automatically.
SPF Management, Reinvented
A smarter way to manage your SPF record at any scale.
Macro-Based Flattening
Our hosted SPF uses macros to dynamically resolve includes at query time — staying within the 10-lookup limit while supporting unlimited senders.
Automatic IP Resolution
We continuously resolve all your SPF includes to their underlying IP addresses and keep records updated as providers change their infrastructure.
One CNAME, Full Control
Delegate your SPF record with a single CNAME. Add, remove, and reorder senders from the dashboard — changes go live in under 5 minutes.
Lookup Counter
Real-time visualization of your DNS lookup count. See exactly how each service contributes and get warnings before you hit the limit.
Provider Detection
Automatically detect which email services are sending from your domain and generate the correct SPF includes for each one.
Version History
Every change to your SPF record is tracked with full version history. Roll back to any previous configuration with a single click.
Frequently Asked Questions
What is SPF flattening?
SPF flattening resolves all include mechanisms to their underlying IP addresses, reducing the number of DNS lookups required. SimpleDMARC takes this further with macro-based flattening, which dynamically resolves IPs at query time — keeping your record within limits while supporting unlimited senders.
Will hosted SPF affect my email delivery?
No. Hosted SPF produces the same authentication result as a traditional SPF record. Receiving mail servers see a valid SPF record with the correct IP authorizations. The only difference is how the record is managed — through our dashboard instead of your DNS.
How do I add a new email service?
Simply search for the service in our dashboard (e.g., "SendGrid" or "Mailchimp"), click to add it, and we automatically include the correct SPF mechanism. Changes go live within minutes — no DNS editing required.
What if a provider changes their IP ranges?
We monitor all major email providers for IP range changes and automatically update your hosted SPF record. You never have to worry about stale IP addresses causing authentication failures.
Can I migrate back to a standard SPF TXT record?
Yes. You can export your current SPF configuration as a standard TXT record at any time. Simply remove the CNAME delegation and publish the TXT record in your DNS. There is no vendor lock-in.
Ready to Fix Your SPF?
Stop battling the 10-lookup limit. Hosted SPF gives you unlimited senders with zero DNS headaches.