DMARC monitoring see everyone sending mail as your domain.
DMARC aggregate reports are XML attachments landing in a mailbox nobody reads. Point your domain's rua tag at the address we give you and CertSentry parses every report - who is sending as you, how much, and whether SPF and DKIM actually pass.
Free personal workspace forever · No credit card
The coverage
What this watch covers
A hosted reporting address
Each domain gets its own ingest address - one DNS record change and reports start flowing. No mailbox access, no forwarding rules.
Senders, not XML
Reports are parsed into a live source table: every sender using your domain, volumes, and SPF/DKIM results per source.
New senders raise a hand
The first time an unknown source sends as your domain, you're alerted - whether it's a new marketing tool or a spoofer.
Failure spikes too
When authentication failure rates jump - a broken DKIM key, a misconfigured route - the watch says so before inbox providers quietly start junking you.
Questions
Common questions
What do I have to change?
One DNS record: add the reporting address we give you to the rua tag of your domain's DMARC record. Reporting providers start sending within a day or two.
Do you need access to my mailboxes?
No. Aggregate reports are sent by receiving providers like Gmail and Outlook directly to the reporting address - your mail itself never touches CertSentry.
Will this improve deliverability?
It shows you exactly which senders fail SPF or DKIM and where your volume comes from - the groundwork for moving DMARC policy to quarantine or reject safely. The policy decision stays yours.
Which plans include DMARC monitoring?
Pro includes one domain and Agency five, with add-ons for more.
The rest of the watch
Also on watch
- SSL certificatesExpiry ladder alerts, broken-cert detection and a TLS grade per check.
- Domain expiryRegistry-sourced expiry dates with the 30-to-1-day warning ladder.
- DNS changesDaily snapshots of six record types, alerting only on confirmed changes.
- UptimeChecks from 7 regions; down only when two regions agree, twice.
- Cron jobs & heartbeatsA ping URL per job; an alert the moment the pings stop.
- Certificate TransparencyDaily CT log sweeps; an alert on any new certificate for your domain.
The next expiry email you get should be from us.
Not from a furious client. Add your first domain in under a minute.
Start the watch - free