The questions every owner asks

No, you don't have to. Guide mode is a first-class option: we tell you exactly which records to add (host, type, value), you paste them into your DNS provider yourself, and we verify each one from the outside using public DNS and test emails. You never share a password.

If you'd rather we do it, the safest ways are: add us as a limited user/delegate in your DNS provider (Cloudflare, GoDaddy, Namecheap, Google Domains-successors and others support this) and remove us afterwards, or screen-share while you click. We never ask for your registrar login, we don't store credentials, and you can revoke access the moment we say we're done. We never need access to your mailbox contents.

That's the risk we design around. We start DMARC at p=none (monitor only, nothing gets blocked), we check every sender you use before touching SPF, and we keep a copy of your original records so changes can be rolled back. We never switch to quarantine or reject without evidence from the reports (that is the Fix + Enforce plan).

On Starter, the verification check looks up the SPF, DKIM and DMARC records you added and confirms they are present and valid. On the Fix plans, we send test emails from each in-scope sender to Gmail and Outlook.com inboxes and read the Authentication-Results headers. The test passes when SPF, DKIM and DMARC all show pass, aligned to your From domain. We include the headers in the report so you can see for yourself.

No, and be wary of anyone who says it will. Correct authentication removes a major reason for spam filtering and is required by Gmail, Yahoo and Outlook.com for bulk senders. Reputation, content and list quality still matter.

Yes, if the free checker shows green and a real test email to Gmail shows SPF, DKIM and DMARC passing in "Show original", you probably don't need us. (The checker only reads public DNS, so it can't tell how your mail is actually signed.) Our value is for when it's red or you can't tell what to change: we make the change, handle the awkward cases (multiple senders, SPF lookup limits, third-party tools) and prove it works with a real email.

Your domain, the mailbox provider and any tools that send as you, and either DNS access (delegated/temporary) or willingness to paste records in guide mode. Plus an address we can send test emails from, or a test inbox you can forward headers from.

Each plan covers one domain. Each extra domain is $149, and each sending service beyond 3 is +$49. On-premise mail servers or very complex setups are quoted separately before any work starts.

Run by an engineer who sets up and verifies mail authentication.

More on the about page.

Not just Google Workspace. We work with Microsoft 365, Zoho and similar mailbox providers, newsletter tools such as Mailchimp, ConvertKit and Beehiiv, and stores such as Shopify and WooCommerce. If a sender can't sign with your domain on its plan, we'll tell you up front.

Starter ($129) if one tool sends as your domain and you're happy to paste the records yourself. Fix ($199) if up to 3 tools send as you, or you want us to make the changes and verify with real test emails to Gmail and Outlook.com. Fix + Enforce ($349) if you also want protection against spoofing: 30 days of DMARC report monitoring and a staged move to quarantine, then reject. See pricing.

Payments are handled by Stripe, so your card details go to Stripe, not to us. You can use "Email my request" on the order form and we reply with a secure Stripe payment link and next steps.

Your domain's public MX, SPF and DMARC records, plus 32 common DKIM selectors (and one of your own, if you enter it). The lookups run in your browser against public DNS. Nothing is stored. See the privacy policy.