Changelog

Partner Starter — $99/mo

A second, lower partner tier: $99/month including your first 25 domains, then $3.99 per additional domain. It's the cheaper tier up to about 75 domains; Partner ($299/mo, 100 included) takes over above that. Both are self-serve — subscribe online, switch tiers any month.

Active-domain billing

Your billable domain count now reflects only domains that received at least one DMARC report in the last 30 days. Domains you've enrolled but that aren't sending yet — parked names, or names provisioned ahead of a rollout — don't count until reports start arriving.

Clearer partner program page

The partner page now routes MSPs and hosting providers to tailored paths, and answers the questions partners actually ask — tier choice, what counts as a billable domain, who bills the client, and how migration works — in a dedicated FAQ.

DNSSEC validation monitoring

See whether your zone is DNSSEC-signed and whether the chain of trust validates, with an alert the moment a signature expires or a delegation breaks.

DANE / TLSA monitoring

Track the TLSA records that pin your mail server's certificate in DNSSEC-signed DNS, so you know your DANE-enforced delivery stays intact after a certificate rotation.

New learn guides

Added plain-language explainers — What is DNSSEC?, What is DANE?, and What is DKIM2? — to the learn hub.

Partner toolkit

A public MSP battlecard, a live margin calculator that prices the cheaper of the two partner tiers for your client-domain count, and a printable white-label client one-pager you can brand and send.

Self-serve partner signup

Start a partner account and subscribe online with a card. No application, no partner agreement, no setup fee — though we'll still sign an agreement or walk you through it on a call if your procurement needs one.

Compliance guides by mandate

New guides for PCI DSS v4.0.1 (Requirement 5.4.1), the Google/Yahoo/Microsoft bulk-sender rules, cyber-insurance underwriting questions, and NIS2 — each with deadlines and a step-by-step checklist.

No-overage pricing framing

The pricing page now spells out that plans have no per-email volume limits or overage fees, adds value context to each tier, and anchors the Enterprise plan with a published starting price.

Competitor comparison refresh

Refreshed every /compare page against competitors' July 2026 published pricing and features, and synced our own plan facts across the tables.

State of Email Security 2026 report

A research report built from independent DNS scans measuring real-world adoption of DMARC, SPF, MTA-STS, TLS-RPT and BIMI, with a downloadable dataset and distribution kit.

Emailed checker reports

The free domain checker can now send your full email-security report to your inbox, so you can act on it later or forward it to whoever owns your DNS.

Field Notes blog

The DDMARC blog launches with hands-on setup guides for Google Workspace and Microsoft 365, subdomain-policy deep-dives, and how to read your aggregate reports.

Refreshed forest brand

A new forest-green identity across the site, replacing the previous blue/cyan palette.

Accessibility pass

Keyboard-navigable menus, larger touch targets, stronger text contrast, labelled form fields, and reduced-motion support across the marketing site.

"Plus" plan renamed to "Protect"

The entry paid plan is now called Protect everywhere — pricing, docs and comparisons — to match what the dashboard shows.

Managed MTA-STS hosting

Enforce TLS for your inbound mail without running a policy server. Two CNAMEs and we do the rest: the policy file served over HTTPS with a certificate for your domain, and the policy id bumped automatically on every change so receivers always pick up updates. Policies start in testing mode, and switching to enforce checks your live MX records first — a misconfigured policy can't silently block your mail.

Managed BIMI logo & VMC hosting

Upload your logo SVG and Verified Mark Certificate — we validate them against the BIMI security profile, host both over HTTPS, and publish the BIMI record behind a single CNAME. Replacing the logo or adding a VMC later never touches your DNS again.

Delegation monitoring across all hosted records

Hourly end-to-end checks on every hosted record — DMARC, SPF, DKIM, MTA-STS and BIMI — with alerts the moment a delegation breaks.

Hosted SPF flattening

Point a single include at DDMARC and we resolve your SPF sources to IP addresses, serve the flattened record with a 5-minute TTL, and re-resolve every 30 minutes — no more 10-lookup failures, no chasing provider IP changes. If a refresh ever fails, we keep serving your last known-good record and alert you.

Hosted DKIM keys

Generate a DKIM key in one click: we serve the public key from our zone, you install the private key on your mail server (shown once, never stored by us). Rotations publish a new selector alongside the old — one CNAME per selector, and your DNS never changes again.

Delegation monitoring

If your SPF include or a DKIM CNAME ever stops pointing at your hosted records, you get a critical alert before deliverability suffers.

Smart provider guidance

Domains sending through Google Workspace or Microsoft 365 are steered to those providers' native DKIM, with hosted DKIM recommended for your other senders.

Hosted DMARC management (GA)

Delegate _dmarc via a single CNAME and manage your DMARC policy from the dashboard — including scheduled, gradual policy ramp-up to p=reject.

Sender identification

Sending sources are automatically labeled with the email service behind them (Google Workspace, SendGrid, Mailchimp, and more), with confidence-aware labeling that never guesses.

Guided DNS fixes

Every failing sender now comes with the exact, copyable DNS change that fixes it — the precise SPF include to add and the provider's DKIM setup steps. You stay in control: changes are applied in your DNS, never ours.

Volume & new-sender alert rules

Alert on email volume spikes or drops versus your domain's 7-day baseline, and on never-before-seen sending sources — delivered to email, Slack, Teams, Telegram, or webhooks.

Compliance posture PDF

One-click executive PDF summarizing your domains' DMARC, SPF, DKIM, TLS-RPT, and MTA-STS posture.

Scheduled DNS checks on every plan

Scheduled DNS monitoring is now included on the free Monitor plan; forensic (RUF) reports are included from Protect up.

Japan region now available

New Tokyo data center for Asia-Pacific customers with sub-50ms latency.

Canada region launched

Montreal data center for Canadian data residency requirements.

Reduced API latency by 40%

Optimized database queries and added regional caching.

Fixed timezone display in reports

Slack and Microsoft Teams integrations

Receive alerts directly in your team chat.

Custom alert rules

Create alerts based on specific conditions like authentication failure rates.

Alert digest mode

Get daily or weekly summaries instead of individual alerts.

Reduced false positive alerts by 60%

Fixed duplicate alert notifications

Interactive trend charts

Drill down into authentication data with clickable charts.

Source IP geolocation mapping

See where your email is being sent from on a world map.

Export reports to PDF

Generate professional PDF reports for stakeholders.

Dashboard load time reduced by 50%

Added dark mode support

Role-based access control (RBAC)

Admin, Editor, and Viewer roles with granular permissions.

Team activity log

See who made changes and when.

Shared saved views

Save and share custom dashboard views with your team.

Added SSO support for Google Workspace

Completely redesigned dashboard

Modern, intuitive interface built for speed and usability.

Real-time report processing

See DMARC reports within minutes of receiving them.

MTA-STS and BIMI support

Full support for modern email security standards.

API v2 with GraphQL

Powerful new API for custom integrations.

End-to-end encryption for all data

Interactive DNS record generator

Generate correct DNS records based on your email infrastructure.

Configuration validation

Instant verification that your records are correct.

Added guides for 50+ DNS providers

Fixed SPF include limit calculation

SAML SSO support

Integrate with Okta, Azure AD, OneLogin, and more.

IP allowlisting

Restrict dashboard access to specific IP addresses.

Audit logs

Detailed logs of all account activity.