Stop Spoofing. Enforce with Confidence.
Email trust and domain protection platform. Monitor DMARC, score your domain security across 9 dimensions, detect lookalike and dangling threats, and move safely from p=none to p=reject.
Free plan available · Results in under 5 minutes · 14-day trial on paid plans
Score. Monitor. Enforce. Detect.
Four integrated capabilities covering the full domain security lifecycle — from initial posture assessment to active threat detection.
Score
100-point Domain Security Score across 9 dimensions. Know your posture at a glance and know exactly what to fix first.
Monitor
Aggregate DMARC reports processed automatically. See every sender — authorised, shadow IT, and attacker — in one place.
Enforce
Impact simulation, risk-classified remediation, and one-click DNS rollback. Move to p=reject without fear.
Detect
Lookalike domain monitoring, dangling DNS detection, and automated takedown orchestration.
A single number that tells you where you stand.
The Domain Security Score is a 100-point composite assessment across 9 dimensions of your email authentication and DNS security posture. Letter grades A–F, historical trend tracking, and industry benchmarking so you know not just your score, but whether you're improving.
A free score preview is available without an account at spoofsentry.com/tools.
Check Your ScoreDMARC
Policy strength and reporting completeness
SPF
Sender Policy Framework alignment and coverage
DKIM
Key rotation health and signing coverage
Sender Coverage
Extent of authenticated senders
MTA-STS
Transport-layer encryption policy
BIMI
Brand Indicator readiness and VMC
Lookalike
Risk from domain imitation attacks
Managed SPF/DKIM
Centrally maintained authentication records
DANE
DNS-based certificate authentication
See every sender. Understand every report.
Aggregate DMARC reports processed automatically. AI-powered sender classification identifies 26+ ESP providers so you know who is sending on behalf of your domains — not just an IP address.
Aggregate Report Processing
- Automatic RUA report ingestion
- SPF and DKIM alignment per sender
- TLS-RPT failure reporting
- Volume trend analysis
AI Sender Classification
- 26+ ESP providers auto-identified
- Shadow IT detection
- Attacker traffic flagged
- Sender inventory with risk labels
Continuous Monitoring
- Real-time sender alerts
- New source notifications
- Branded digest emails
- Email deliverability dashboard
From p=none to p=reject — without fear.
Most DMARC journeys stall at p=none because teams are afraid of blocking legitimate email. The Enforcement Center removes that uncertainty with impact simulation and instant rollback.
Simulate
Replay aggregate report data through an impact model — see exactly which senders would be blocked at p=reject before you flip the switch.
Remediate
Risk-classified sender inventory with guided remediation playbooks. Know which senders to fix, authorize, or remove before enforcing.
Enforce
Move from p=none to p=quarantine to p=reject at your own pace. One-click DNS push to Cloudflare, Route 53, Azure DNS, GoDaddy, and Google Cloud.
Rollback
If anything looks wrong post-enforcement, roll back to the previous policy in one click — with full audit trail.
One-click DNS rollback
Native integration with Cloudflare, Route 53, Azure DNS, GoDaddy, and Google Cloud DNS. Push or revert your DMARC policy directly from the console — no manual DNS editing required.
Detect what your DNS doesn't tell you.
Domain spoofing goes beyond your own DMARC policy. SpoofSentry watches the broader threat surface — lookalikes, abandoned subdomains, and active spoofing campaigns — and acts on them.
Lookalike Domain Detection
Continuous monitoring for domains that impersonate your brand — typosquats, homoglyphs, and combo-squats — with automated takedown orchestration via Google Web Risk, Netcraft, and URLhaus.
Dangling DNS & SubdoMailing
Detect DNS records pointing to decommissioned services that attackers can claim. SubdoMailing detection identifies subdomains being abused for spam campaigns.
Spoofing Campaign Detection
AI-powered analysis of aggregate report data to surface active spoofing campaigns against your domains, with IP attribution and sender intelligence.
Fits where your team already works.
25+ integrations for alerting, ticketing, SIEM ingestion, and PSA/RMM workflows. Webhooks for anything else.
- Enterprise SSO — OIDC, SAML, SCIM provisioning
- 91 RBAC permissions across 8 roles
- Full REST API with webhook support
- Executive PDF reports on demand
MSSP Multi-Tenant Portal
partners.domainseal.app
Manage multiple client tenants from a single dashboard. Full isolation between tenants, white-label branding, operator context switching with audit trail, and fleet-wide alerting.
- Managed tenant provisioning and isolation
- White-label branding per tenant
- Fleet-wide dashboard with drill-down
- Customisable alert routing per client
- Bulk operations across tenants
Evidence bundles for 11 frameworks.
Enterprise plans include pre-built compliance evidence bundles covering the frameworks your auditors ask about.
16 free tools. No account required.
Start diagnosing your domain security right now — no signup needed. Check your DMARC record, validate SPF and DKIM, scan for dangling DNS, and get a Domain Security Score preview instantly.
Explore Free ToolsSimple, transparent pricing.
Start free. Scale as you grow. All paid plans include a 14-day trial and 30-day money-back guarantee.
Monitor
See who's sending email on your domain — no credit card, no commitment.
- 1 domain
- DMARC visibility
- Domain Security Score (preview)
- 7-day data retention
- 1 team member
Protect
For growing businesses that need reliable monitoring, alerts, and compliance-ready reporting.
- Up to 5 domains
- SPF, DKIM & DMARC monitoring
- Full Domain Security Score
- Dangling DNS detection
- Remediation playbooks
Enforce
For IT and security teams who need deep analytics, auto-remediation, and third-party risk visibility.
- Up to 10 domains
- Enforcement center & sender inventory
- Auto-remediation with risk classification
- Impact simulation & rollback safety
- Third-party & inbound vendor risk
Ready to enforce with confidence?
Start on the free Monitor plan — no credit card required. First results in under 5 minutes. Or talk to our team about MSSP and enterprise deployment.