Dashboard Guide
Learn how to navigate the DDMARC dashboard to monitor your email authentication, analyze reports, track senders, and manage your DMARC deployment.
Dashboard Sections
Overview
High-level summary with pass rates, volume trends, and domain health status
Reports
Browse and analyze incoming DMARC aggregate reports with detailed breakdowns
Domains
Manage domains, view DNS configurations, and track verification status
Senders
Track all IPs sending as your domain with categories and authentication status
DNS Monitoring
Monitor SPF, DKIM, DMARC, TLS-RPT, MTA-STS, and BIMI records
TLS Reports
Plus+Analyze TLS connection failure reports (TLS-RPT) with policy and failure breakdowns
Forensic Reports
Pro+Analyze individual failure reports (RUF) with full message details
Exports
Plus+Download reports, senders, and activity data in CSV format
Overview Page
The Overview page provides a bird's-eye view of your email authentication status:
Summary Cards
Key metrics at a glance: total emails processed, pass rate percentage, authentication failures, and active domains count.
Trend Charts
Interactive line charts showing pass/fail rates over time. Switch between 7, 14, 30, or 90-day views to track improvement as you deploy DMARC.
Recent Activity
Timeline of recent events including new reports received, policy violations, new senders detected, and DNS changes.
Domain Summary
Quick status cards for each domain showing policy level, pass rate, and recent activity. Click a domain to dive into its details.
Reports
The Reports page shows all incoming DMARC aggregate reports from email providers:
Report List Columns
| Column | Description |
|---|---|
| Reporter | Organization that sent the report (Google, Microsoft, Yahoo, etc.) |
| Domain | Your domain the report is about |
| Date Range | Time period covered by the report (usually 24 hours) |
| Total | Number of emails in the report |
| Pass | Emails that passed DMARC authentication |
| Fail | Emails that failed DMARC authentication |
| Pass Rate | Percentage of passing emails with visual indicator |
Report Details
Click on any report to see detailed breakdowns by source IP, including geolocation data, ASN information, SPF/DKIM/DMARC results, and alignment status.
Domains
Manage your monitored domains and their configurations:
Domain List
View all domains with their verification status, DMARC policy, and pass rates. Add new domains or remove existing ones.
DNS Configuration
Get exact DNS records to add to your domain. Copy-paste ready TXT records for SPF, DKIM, DMARC, and optional MTA-STS/BIMI.
Domain Detail View
Click any domain to access its dedicated dashboard with:
- Domain-specific pass rate trends
- Top sending sources for this domain
- Recent authentication failures
- DMARC policy history and changes
- Compliance score and recommendations
- Quick DNS verification check
Senders
Track and categorize all IP addresses that have sent email using your domain:
Authorized Senders
IPs that pass authentication. These are your legitimate email senders (mail servers, marketing platforms, CRM systems).
Unauthorized Senders
IPs failing authentication. Could be spoofing attempts or misconfigured legitimate services that need SPF/DKIM setup.
Sender Categories
Organize senders into categories for better visibility:
DNS Monitoring
Comprehensive monitoring of all email authentication DNS records:
Monitored Records
| Record | Purpose | Availability |
|---|---|---|
| SPF | Authorize mail servers to send on your behalf | Free+ |
| DKIM | Cryptographically sign emails for authenticity | Free+ |
| DMARC | Define policy for handling authentication failures | Free+ |
| TLS-RPT | Receive TLS connection failure reports | Plus+ |
| MTA-STS | Enforce TLS encryption for inbound email | Plus+ |
| BIMI | Display brand logo in email clients | Plus+ |
Manual Checks
Run on-demand DNS checks to verify your records are configured correctly. Get instant validation with detailed error messages.
Scheduled Monitoring
Plus+Automatic periodic checks with alerts when records change or become invalid. Set monitoring intervals from hourly to daily.
TLS ReportsPlus+
TLS-RPT (RFC 8460) reports reveal TLS negotiation failures between sending mail servers and your domain, helping you identify and fix encryption issues:
Report Analysis
- Policy-level success and failure counts
- Failure type breakdown (certificate, STARTTLS, DANE)
- Sending MTA and receiving MX identification
- Per-policy detailed failure reasons
- Reporting organization metadata
- Trend analysis across reporting periods
Failure Types
Categorizes failures like certificate-expired, certificate-host-mismatch, starttls-not-supported, sts-policy-invalid, and more per RFC 8460.
Success Rate Tracking
Monitor your overall TLS success rate and track improvements as you fix certificate and configuration issues.
Forensic ReportsProfessional+
Detailed failure reports (RUF) provide granular information about individual authentication failures:
What's Included
- Source IP address with geolocation
- Original sender and recipient addresses
- Full authentication results (SPF, DKIM, DMARC)
- Sample email headers for investigation
- ASN and organization information
- Failure reason and type classification
Privacy Note
Forensic reports may contain sensitive information. DDMARC securely stores reports with encryption and role-based access control.
ExportsPlus+
Download your data for offline analysis, compliance reporting, or integration with other tools:
DMARC Reports
Export all report records with authentication results, source IPs, and disposition.
Senders
Export sender data with categories, pass rates, geolocation, and notes.
Activity Log
Export audit trail with timestamps, actions, users, and IP addresses.
Filtering & Search
Use the toolbar at the top of each page to filter and customize your view:
Date Range
Select predefined ranges (24h, 7d, 30d, 90d) or set custom dates
Filters
Filter by domain, source IP, result type, reporter, or sender category
Search
Search by domain name, IP address, ASN organization, or reporter name
Features by Plan
Dashboard features available on each subscription tier:
Free
- 1 domain
- 7-day data retention
- Basic SPF/DKIM/DMARC monitoring
- Manual DNS checks
- Email notifications
Plus
- 5 domains
- 30-day data retention
- TLS-RPT, MTA-STS, BIMI monitoring
- Scheduled DNS monitoring
- Trend analysis & charts
- Data exports (CSV)
- Slack & Discord webhooks
- API access
Professional
- 25 domains
- 90-day data retention
- Forensic reports (RUF)
- Custom DKIM selectors
- Telegram & Teams webhooks
- Team collaboration
- Policy automation
- Priority support
Enterprise
- Unlimited domains
- 365-day data retention
- SSO/SAML integration
- Custom SLA
- White-label options
- Dedicated support