Enforcement-ready client domains, on the Partner plan.
For MSPs with 50 or more client domains: the Partner plan at $299 a month with 100 domains included, plus a readiness workflow that takes each domain to enforcement on evidence the client signs off. Where the product does not do a step yet, we do it by hand and say so below.
MSPs with a real portfolio and DNS access.
Four steps, and who does each one today.
01Sender inventory with owner approval
Product plus a personYour client sees every service that sends as their domain, who owns it on their side, and whether they approved it.
Today: The Senders view lists every source found in each domain's aggregate reports, with its provider, volume and SPF and DKIM results, and lets you categorize each one and add notes. It has no owner or approval field yet, so for pilot accounts we record each sender's owner and the client's approval by hand in the readiness pack.
02Readiness checklist with documented exceptions
Done by hand for pilot accountsEach domain gets a written list of what has to be true before enforcement, with every exception and its reason on the record.
Today: The product scores each domain from 0 to 100 and names its top issue. The checklist and the exceptions are not in the product yet: for pilot accounts we write them by hand in the readiness pack, from the domain's own report data.
03DNS change alerts
Done by hand for pilot accountsWhen someone edits a client's SPF, DKIM or DMARC record, you hear about it before the client's mail does.
Today: The product checks each domain's records once a day by default and keeps every change in the domain's DNS history. Change emails for client domains do not reach the partner account yet, so for pilot accounts we review that history and email you each change by hand.
04White-label client evidence export
Product plus a personYour client gets a document under your name that shows where each domain stands and what was decided, as supporting evidence for their own review.
Today: Your client's white-label portal already exports a posture summary PDF under your company name and brand color. The readiness pack that goes with it, with senders, checklist, exceptions and changes, is assembled by hand for pilot accounts.
Readiness and documented exceptions. Nothing on a calendar.
Readiness, not a date.
No staged share of mail.
No reject for domains whose users post to mailing lists.
Going back is a reviewed change.
We hold no DNS write access.
What this offer does not cover.
The readiness work uses aggregate reports only. Forensic samples, if a domain publishes a ruf= tag, are outside the pilot workflow.
You or your client publish every record. We hold no credentials for any zone.
Enforcement follows readiness and the client's sign-off, domain by domain.
The REST API and outbound webhooks ship today. Native ConnectWise, Autotask, Kaseya, NinjaOne and HaloPSA modules are on the roadmap, not live.
Removing a client means deleting its whole organization, as the partner billing rules explain. Export its history first.
$299 a month. 100 domains included.
Below 76 domains, Partner Starter at $119 a month costs less and runs the same product, without the by-hand pilot work.
Every billing rule is on the partner program page, and client data is covered by the data processing agreement.
Want the remediation done for you?
PlatOps, the company behind DDMARC, sells the DMARC Enforcement Sprint: $2,500 per domain, one-time, about 30 days for most domains. It finds and fixes each sender and hands back a written account of what changed. It is optional, priced separately, and the pilot does not require it.
The questions MSPs ask.
MSPs that manage at least 50 client domains, hold DNS access for them or can get it, and want their clients at enforcement with evidence the client can read. The first 5 MSPs on the Partner plan get the by-hand parts of the workflow described on this page.
A domain is ready when every legitimate sender is authenticated, its checklist is complete and the client has signed off. RFC 9989, the current DMARC standard, retired the pct tag and advises against reject for domains whose users post to mailing lists (section 7.4). A date can account for neither, so the pack records exceptions instead of a deadline.
$299 a month with 100 client domains included, then $2.99 per domain above that. Domains are counted at the daily usage sync, about 05:00 UTC. There is no setup fee, no annual billing and no trial, and you can cancel any month from the Stripe customer portal. Below 76 domains, Partner Starter at $119 a month costs less and runs the same product, without the by-hand pilot work.
No. We hold no DNS credentials. Each change is drafted, reviewed by you and, where you choose, by the client, then published by whoever owns the zone. The previous record is kept in the pack, so going back is the same reviewed procedure.
The pilot works from aggregate reports, which are counts by sending source and carry no message content. Forensic samples arrive only if a domain publishes a ruf= tag, are kept for 90 days, and are not part of the pilot workflow. The data processing agreement covers every client domain: you remain the controller of your account, we act as your sub-processor for your clients, and you hold each client's authorization.
Yes, as separately priced work. PlatOps sells the DMARC Enforcement Sprint at $2,500 per domain, one-time on platops.com. It is optional, and the pilot does not require it.
- 1Create a free account from any subscribe button on this page
- 2Verify your email: Stripe Checkout opens for the Partner plan
- 3Send us your first client's domains and we start its readiness pack
Start with one client. 100 domains are already included.
Subscribe with a card, enroll your first client organization, and tell us which domains to start on. The first readiness pack is the proof that the workflow fits your service.