Google, Yahoo & Microsoft now require DMARC

Pass DMARC before your email starts bouncing.

Google, Yahoo and Microsoft now reject or junk mail from domains without a DMARC policy. Blankitt shows you every service sending as you, fixes SPF/DKIM, and gets you to safe enforcement — UK-built, UK-supported, no enterprise contract.

Sending to Gmail or Outlook? A missing or misconfigured DMARC record means your mail lands in spam — or bounces.

Check your domain freeView pricing

Free domain check — no account required. UK public sector: NCSC Mail Check retires 31 March 2026, so you'll need a replacement.

Free

domain check — no account, no sales call

6 checks

DMARC, SPF, DKIM, DNSSEC, MTA-STS, TLS-RPT

31 Mar 2026

NCSC Mail Check retired — teams need a home

UK-built

UK-supported, without the enterprise contract

Free DMARC Record Checker

Instantly check your DMARC, SPF, and DKIM records. Get recommendations to improve your email security.

Check now

Complete email authentication visibility

Everything you need to monitor and improve your email security posture.

DMARC Report Analysis

Automatically parse aggregate reports from Microsoft 365, Google Workspace, or any email provider.

Sender Identification

37+ vendors detected automatically. Know exactly who is sending email on your behalf.

SPF Lookup Analysis

Track DNS lookups and get warnings before you hit the 10-lookup limit.

Policy Simulator

Preview the impact of moving to quarantine or reject before making changes.

Fix Recommendations

Get vendor-specific guidance on configuring SPF, DKIM, and DMARC correctly.

MTA-STS & TLS-RPT

Complete email security monitoring including transport encryption policies.

Full feature breakdown

Every feature is included in every plan. No hidden upsells or feature gates.

DMARC Analysis

  • Aggregate report parsing (RUA)
  • Forensic report parsing (RUF)
  • Policy monitoring (none/quarantine/reject)
  • Subdomain policy tracking
  • Alignment mode detection (relaxed/strict)

SPF Analysis

  • SPF record validation
  • DNS lookup counter (10-limit tracking)
  • Nested include resolution
  • IPv4/IPv6 range analysis
  • Void lookup detection

DKIM Analysis

  • DKIM selector discovery
  • Key length validation (1024/2048-bit)
  • Signature verification
  • Multi-selector support

Sender Intelligence

  • Automatic vendor identification (37+ vendors)
  • Authorized vs unauthorized sender detection
  • Volume and trend analysis
  • Geographic sending patterns

Reporting & Alerts

  • Email alerts
  • Webhook notifications
  • Daily/weekly digest
  • CSV export
  • API access

Advanced Features

  • Policy simulator
  • Fix recommendations with vendor guides
  • DNSSEC validation
  • MTA-STS monitoring
  • TLS-RPT support
  • BIMI readiness check

Get started in 5 minutes

1

Connect your email provider

Link Microsoft 365, Google Workspace, or upload existing DMARC reports.

2

Review your authentication status

See which services are sending email on your behalf and their authentication results.

3

Follow the recommendations

Get step-by-step guidance to fix SPF, DKIM, and DMARC issues.

4

Progress to enforcement

Use the policy simulator to safely move from p=none to p=reject.

Enterprise features at SMB prices

See how Blankitt DMARC compares to traditional enterprise tools

FeatureBlankittLegacy enterprise DMARC
Starting priceFree, then £29/moFrom ~£170/yr per domain
Domains included1–1001–5
Every feature on every planYesSSO, API & audit gated
Time to value5 minutesDays/weeks
Self-service100%Sales required
UK-built, self-host optionYesUS-only SaaS
Self-hosted optionYesNo

Why Blankitt: every feature on every plan. Self-host option. One login and one bill if you also run Blankitt for IT, finance or HR.

Understand email authentication

New to DMARC? Learn the fundamentals of email authentication and why it matters.

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that protects your domain from being used in phishing attacks.

Learn more

SPF Explained

SPF (Sender Policy Framework) specifies which mail servers are authorized to send email on behalf of your domain using DNS TXT records.

Learn more

DKIM Explained

DKIM (DomainKeys Identified Mail) adds a digital signature to your emails, allowing recipients to verify they haven't been altered in transit.

Learn more
View all guides

Built and run by the UK team behind the Blankitt platform. UK-built and UK-supported. Your DMARC reports are encrypted and tenant-isolated, processed in the EU on Cloudflare's network — or self-host them on your own infrastructure for full data control. Cancel anytime, export your data anytime.

Every feature on every plan — no upsells.

We don't gate features. Plans differ on just two honest things: how many domains you monitor and how long we keep your history.

Every plan includes all features

Analysis

  • DMARC aggregate & forensic reports
  • SPF validation & lookup tracking
  • DKIM selector discovery
  • Policy & alignment monitoring

Intelligence

  • Sender identification (37+ vendors)
  • Authorized vs unauthorized detection
  • Volume & trend analysis
  • Geographic patterns

Tools & Integrations

  • Policy simulator
  • Fix recommendations
  • DNSSEC validation
  • MTA-STS & TLS-RPT
  • BIMI readiness check

Reporting

  • Email & webhook alerts
  • Daily/weekly digest
  • CSV export
  • Full API access

Free

£0forever

No card required

Domains1
Retention1 month

Every feature included

Start free
Popular

Starter

£29/month

or £290/yr (2 months free)

Domains5
Retention6 months

Every feature included

Get started

Pro

£99/month

or £990/yr (2 months free)

Domains25
Retention12 months

Every feature included

Get started

Business

£249/month

or £2,490/yr (2 months free)

Domains100
Retention24 months

Every feature included

Get started

Free tier needs no card. Cancel in one click.

Need more domains? +£4/mo each.

Bigger estate or want it on your own kit? Self-host for unlimited domains, or talk to us.

Self-hosted option

Keep your DMARC data on your own infrastructure. Full control, complete data sovereignty.

£2,500
one-time perpetual license

License includes:

  • All features, unlimited domains
  • Unlimited retention
  • Docker deployment
  • Air-gapped friendly
  • UK support included
£500
/year (optional)

Support includes:

  • Priority email support
  • Security patches
  • Feature updates
  • Upgrade assistance

Deploy with Docker in minutes. Air-gapped environments supported.

Get a license

Go deeper

Free tools, honest comparisons and sector guides — useful whether or not you ever buy anything from us.

Also in the library: what's new in DMARC · security & compliance

Check your domain's email security now

Free instant analysis. No signup required. See your DMARC, SPF, and DKIM status in seconds.

Check your domain free