Cookies on AIGROW

We use necessary cookies to run the site. With your permission, we also use cookies for analytics, session recordings and marketing attribution.

Cookie Policy

DMARC setup: protection against email sent in your company name, with 30 days of reports read

$290Fixed price, paid onceRecords within 2 working days of your reply, reports read for 30 days

Order for $290How it works

A written report before and after. Delivered as listed, or refunded in full.

AIGROW sets up DMARC for $290, paid once, so receiving servers are asked to stop email forged in your name. We read your SPF, DKIM and DMARC, give you the exact records to publish, raise the policy to quarantine or reject as the reports allow, and read those reports for 30 days.

What the DMARC setup does, and what it does not

DMARC is a DNS record that tells receiving mail servers what to do with mail that claims to come from your domain but fails SPF and DKIM. Set too strict too soon, it can stop your own invoices and newsletters, so it is raised in steps.

What it does
  • Reads your MX, SPF, DKIM and DMARC records and lists every service that sends mail as you, from your answers and from the DMARC reports
  • Gives you the exact records to publish, or publishes them after your approval with a DNS user account you add, never with your password
  • Starts DMARC at p=none with reports to an address we read, then moves to quarantine and to reject only when the reports show each legitimate sender passing aligned SPF or DKIM
  • Reads the DMARC aggregate reports for 30 days and tells you which sender fails and how to fix it
  • Sends a written report before we start and another at day 30, with the records, the policy and what the reports show
What it does not do
  • It does not guarantee that your mail reaches the inbox: each receiving server decides what to do with the mail it gets
  • It does not stop look-alike domains, or a display name copied over another address, which DMARC does not cover
  • It does not raise the policy further than the reports support: if a sender still fails at day 30, the policy stays at the last step the reports support and the report names what is left
  • It does not move your mailboxes to another provider, remove you from blocklists, clean your mailing lists or set up a BIMI logo

From payment to the day 30 report

Each step and when it happens. Nothing changes in your DNS before you approve it.

Pay at checkoutPay once by card at the Stripe checkout. Stripe sends the receipt.2 minutes
Tell us who sends mail as youWe email you straight after payment. Reply with your domain, your DNS provider and the services that send mail in your name.10 minutes
Receive the before report and the recordsWe read your records and send the before report with the exact records to publish, starting DMARC at p=none with reports to an address we read. Nothing changes before you approve.Within 2 working daysAfter your reply
We read the reports and raise the policyFor 30 days we read the DMARC aggregate reports, tell you which sender fails and how to fix it, and move to quarantine and then reject when every legitimate sender passes.Days 1 to 30
Read the after reportAt day 30 you get the records, the policy reached and what the reports show, with any step left and how to take it.Day 30

One domain, one price

Paid once at checkout, which asks for your email and card. Right after payment we email you for your domain, your DNS provider and the services that send mail as you; the before report and the records arrive within 2 working days of your reply.

What we need from you

Reply to our email with the domain you send mail from, your DNS provider, and every service that sends mail as you: your mailbox provider, newsletter tool, invoicing, CRM, help desk and website forms. Tell us whether you publish the records or add us as a DNS user.

What you receive

  • A before report: what your MX, SPF, DKIM and DMARC records say today and whether anyone can send email in your name
  • The exact SPF, DKIM and DMARC records to publish, each with the name and value to paste
  • Publishing by us with a DNS user account, if you prefer, after you approve each change
  • DMARC raised from none to quarantine and then reject, each step only when the reports support it
  • 30 days of DMARC aggregate reports read, with each failing sender named and its fix
  • An after report at day 30 with the records, the policy reached and what the reports show

DMARC setup

$290

Paid once at checkout. No subscription, nothing renews.

If we do not deliver what this page lists, or you change your mind before work starts, you get a full refund.

Why buy it from AIGROW

What you can check before you pay, and after the work.

A fixed price
$290, paid once. No subscription, nothing renews. Everything included is listed on this page before you pay.
Proof you can check
A written report before we start and another at day 30, with your records, the DMARC policy and what the aggregate reports show. The free email spoofing checker reads the same records, so you can check them yourself.
A public method
The free email spoofing checker reads the same public records we work from, so you can check your domain before you pay and again after the work. Run the email spoofing checker

Before you buy

What DMARC covers, what it does not, and how the policy is raised.

It can, when a service that sends as you fails aligned SPF and DKIM. That is why we start at p=none, read the reports, fix each sender and raise the policy only when the reports show every legitimate sender passing. If a sender still fails at day 30, the policy stays at the last step the reports support.

No. You can publish the records yourself from the exact values we send. If you prefer that we publish them, add us as a user on your DNS provider with access to DNS records, and we change nothing before you approve. We never ask for passwords.

We add a report address we read to your DMARC record, next to any address you already have. Receiving servers send their daily summaries there. After day 30 you can keep our address or remove it, and the after report shows how.

No. It covers mail that uses your exact domain in the From address. Look-alike domains and display names copied over another address are outside DMARC, and each receiving server decides how to apply your policy.

The price covers one domain and its subdomains. For a domain that sends no mail at all, the free email spoofing checker gives you the two records that close it, so you can publish them yourself.

Then you may not need this service. The free email spoofing checker shows what is left, such as a policy below reject or reports nobody reads. If we do not deliver what this page lists, you get a full refund.

Running Microsoft 365 or Google Workspace?

The workspace security setup checks the tenant behind your mail as well: MFA for every user, admin roles, legacy authentication, sharing and email protection, set with your approval for $490, paid once.

See the workspace security setup

The service that fits next

$290

AI accuracy audit

We check what the four AI assistants get wrong about your business against your real details, and write the fix plan.

See AI accuracy audit

Know who sends mail as you, then ask receivers to stop the rest.

Pay once, reply with your domain, DNS provider and sending services, and receive the before report and the records within 2 working days.

Order for $290See every done-for-you service

$290 · paid once · delivered as listed or refunded