Report receipt
We provide the reporting addresses for DMARC aggregate (RUA) and TLS-RPT reports, accept everything, unpack it and archive it in the EU.
dmarc.cloud All-round full service for DMARC and TLS-RPT – we take care of the analysis and get in touch as soon as action is needed.
Made in Austria (EU).
You set one DNS record once. We take care of operation, analysis, classification and alerts – from the Business plan onwards with review by our analysts. Operated in an EU data centre on our own hardware.
Your domain is being abused. You just don't know it.
The problem
- Hundreds of XML files every day – unreadable without specialist tools and expertise.
- Fraudsters send invoices in your name – and your customers pay into the wrong accounts.
- New cloud services send without authorisation – CRM, newsletter or ticketing systems fail SPF and DKIM.
- One DNS change, and important e-mails end up in spam – usually noticed only when customers call.
- Encryption fails unnoticed – only TLS-RPT reveals expired certificates or a broken MTA-STS setup.
The solution: we do the listening.
You add our reporting address to your DMARC and TLS-RPT records once. From then on, all reports come to us. Our platform analyses them automatically, from Business upwards our analysts review anything unusual – and you only get what matters:
- a clear alert when something is wrong
- a concrete recommendation on what to do
- a clear monthly report for IT and management
Everything your domain reveals about itself
One service, two report types, one point of contact
Automatic analysis
Sender IPs, volume, SPF, DKIM and alignment at a glance. From Business upwards our analysts classify the senders: Microsoft 365, your newsletter tool – or an unknown server.
Proactive alerts
Spoofing waves, broken signatures, TLS errors: you receive an e-mail as soon as the reports arrive, usually daily – sent to recipients of your choice per domain and report type.
TLS-RPT & MTA-STS
We see whether incoming e-mail reaches you encrypted and surface certificate and policy errors before they become a lasting problem.
Path to p=reject
Step by step from p=none to full protection – without losing legitimate e-mail. With a roadmap and DNS templates.
Evidence & reporting
A monthly report in plain language: status, incidents, actions. Suitable as evidence for audits, insurers and NIS2 documentation.
Sample analysis
Illustrative, no real customer data
48,213e-mails analysed
98.6 %DMARC-compliant
3senders with errors
- CriticalUnknown sender using your domain from 185.x.x.x, rejected
- NoticeNewsletter tool without a valid DKIM signature
- OKTLS-RPT: all connections encrypted
Up and running in ten minutes
In four steps
Choose a plan
Order online and enter your domains. You receive your personal reporting addresses within one business day.
Set the DNS records
One line in DMARC, one in TLS-RPT. We send you the finished records – or set them up with your service provider.
Reports start flowing
The first reports arrive after 24–48 hours. After a week you have a good picture of your senders.
We get in touch
An initial assessment with a list of actions, then ongoing monitoring and alerts on relevant deviations.
What an alert from us looks like
No raw data, no alert flood
Spoofing wave on your-company.com
1,240 e-mails from 14 unknown servers using your sender address in the last reporting period. Thanks to p=quarantine they ended up in spam.
Recommendation: warn staff and accounting. Consider moving to p=reject once all legitimate senders are compliant.
New sender: marketing platform
According to the latest reports, a new service is sending in your name. SPF passes, DKIM is missing – under p=reject these e-mails would be rejected.
Recommendation: enable DKIM in the tool, CNAME records attached. Or: service not authorised? Then please let us know.
Incomplete certificate chain
Two remote servers reported errors in your mail server's certificate chain and could not deliver encrypted.
Recommendation: install the intermediate certificate. The next reports will show whether it worked.
Why this matters
#1entry point for cyberattacks is e-mail
p=rejectis the goal – but without report analysis you are flying blind
Dailynew reports arrive and are analysed automatically
100 %data processing in the European Union
Transparent. Fair. Cancel monthly.
Pricing
Self-service tools deliver charts. We deliver answers – for the price of roughly one hour of IT services per month.
Monitor
€29/ month
1 domain, automatic analysis of DMARC and TLS-RPT, e-mail alerts on critical events, monthly report.
Choose MonitorBusiness
€129/ month
3 domains, analyst-reviewed alerts with recommendations, detection of new senders in the analyst review, quarterly review.
Choose BusinessManaged
€349/ month
10 domains, we guide you all the way to p=reject, a dedicated contact, a management report as NIS2 evidence.
All prices net, excl. VAT. Pay annually and get two months free and no setup fee. Compare all plans
Off-the-shelf technology. Tailored care.
Why dmarc.cloud
People, not tickets
Real e-mail security specialists assess your data and talk to you as equals, with support in German and English.
Your data stays in the EU
Operated in an EU data centre on our own hardware. Data processing agreement under Art. 28 GDPR included.
Vendor-independent
Exchange, Microsoft 365, Google Workspace, your own mail server: we work with any environment.
No lock-in
Cancel monthly. Export of your raw data and reports on request.
Ready for full visibility?
Set up in under 10 minutes – your first analyses are ready within 24 to 48 hours.