- Not just Google WorkspaceMicrosoft 365, Zoho, newsletter tools, stores and CRMs.
- We never ask for your registrar loginGuide mode needs no access at all; delegated DNS access is optional.
- Up to 3 sending servicesIncluded on Fix and Fix + Enforce, each verified.
- Staged quarantine, then rejectOn Fix + Enforce, only when 30 days of reports are clean.
- Refund if verification failsOn every plan. Details in the guarantee below.
Starter
- For one sending service (plus your mailbox provider)
- Guide mode: you add the records yourself, we send the exact copy-paste records (host, type, value)
- Verification check of the records you add, with a full refund if they don't pass after you follow the guide
- SPF, DKIM and DMARC in monitor mode (
p=none). No DMARC enforcement
Fix
- DNS audit of your current SPF, DKIM, DMARC and MX
- Single merged SPF record under the lookup limit
- DKIM for your mailbox provider + up to 3 sending services
- DMARC in monitor mode with reporting
- Verification with real test emails to Gmail and Outlook.com
- Written report + DMARC enforcement plan
- Refund if the verification tests fail (see guarantee below)
Fix + Enforce
- Everything in Fix
- 30 days of DMARC report monitoring
- Find and authenticate legitimate senders you forgot
- Staged move from
p=nonetoquarantinetorejectwhen reports are clean
Only worth it if you want protection against people spoofing your domain. Enforcement is not needed to meet the bulk-sender minimum.
Fix + EnforceEach extra sending service beyond 3: +$49. Each extra domain: $149. "Sending services" means the tools that send as your domain (newsletter, store, CRM, invoicing), not counting your mailbox provider. On-premise mail servers or very complex setups are quoted separately before any work starts. Prices are in US dollars.
The guarantee, stated honestly
Applies to all three plans.
Starter: you add the records from our guide and we check them in public DNS. If the records don't pass that verification check after you've followed the guide, you get a full refund.
Fix and Fix + Enforce: after we finish, we send test emails from your real senders to Gmail and Outlook.com test inboxes. If those test messages don't show SPF, DKIM and DMARC passing (aligned to your From domain) for the senders in scope, we keep working on it, and if we still can't get them to pass, you get a full refund.
What we do not promise: inbox placement. Whether a given message reaches the inbox also depends on your sending reputation, list quality, content, and blocklists, which authentication cannot fix. We'll tell you if we see those problems.
Out of scope: senders that can't sign with your domain on their plan, DNS hosts that don't let you or us add the needed records, and domains with active blocklisting or abuse problems. We'll say so up front, before you pay where we can, and refund if it only becomes clear after. See the terms for the details.
Not sure you need us? Many people fix it themselves in under an hour: the free checker points you to what to change. Questions: see the FAQ.
Fixed prices from $129. Refund if verification fails.