Priced per domain.
Never per email.
Monitor is free for 2 domains. Protect is $29 a month for up to 5 domains, Growth $69 for up to 15 and Professional $99 for up to 25. Partner plans start at $119 a month for 30 domains. Send a thousand emails or ten million — the bill is the same. No email-volume overage fees, no per-report charges, and no quote you have to ask for.
Up to 5 domains with forensic reports, the API and the full protocol set.
Paid plans include a 14-day trial. You add a card to start it and we bill when it ends — cancel any time during the 14 days and you are not charged. The free Monitor plan needs no card at all.
All prices in USD, exclusive of VAT, GST and sales tax.
The free Monitor plan is not a trial in disguise.
These are on Monitor, on Enterprise, and on everything between. What you buy with a paid plan is scale, retention and automation — not access to the basics. New to this? Start with what DMARC monitoring involves.
What each upgrade adds.
Instead of sixty rows of ticks, here is what changes when you move up a plan.
You get proof, not just pass rates.
The plan where monitoring becomes investigation.
We start hosting things for you.
The plan most multi-brand businesses land on.
Enforcement stops being manual.
The plan for teams that have to reach p=reject.
Every line, if you want it.
| Capability | Monitor Free | Protect $29 | Growth $69 | Professional $99 | Enterprise From $499 |
|---|---|---|---|---|---|
| Domains & data | |||||
| Domains | 2 | 5 | 15 | 25 | Unlimited |
| Data retention | 30 days | 1 year | 1 year | 1 year | Custom |
| Report history export | Not included | CSV | CSV / PDF | CSV / PDF | Custom |
| Subdomain monitoring | Limited | Included | Included | Included | Included |
| DNS monitoring | |||||
| SPF / DKIM / DMARC monitoring | Included | Included | Included | Included | Included |
| Manual DNS checks | Included | Included | Included | Included | Included |
| TLS-RPT monitoring | Not included | Included | Included | Included | Included |
| MTA-STS monitoring | Not included | Included | Included | Included | Included |
| BIMI monitoring | Not included | Included | Included | Included | Included |
| DNSSEC & DANE/TLSA monitoring | Not included | Included | Included | Included | Included |
| Scheduled DNS monitoring | Manual | Daily | 12-hour | 6-hour | Custom |
| ARC chain monitoring | Not included | Not included | Included | Included | Included |
| Trend analysis & charts | Not included | Included | Included | Included | Included |
| Custom DKIM selectors | Not included | Not included | Not included | Included | Included |
| Managed hosting | |||||
| MTA-STS policy hosting | Not included | Not included | Included | Included | Included |
| BIMI logo hosting | Not included | Not included | Included | Included | Included |
| Hosted DMARC record | Not included | Not included | Not included | Included | Included |
| Automated enforcement (policy rollout) | Not included | Not included | Not included | Included | Included |
| Hosted DKIM | Not included | Not included | Not included | Included | Included |
| Hosted SPF / SPF flattening | Not included | Not included | Not included | Included | Included |
| Detection & compliance | |||||
| AI posture explainer | Not included | Not included | Not included | Included | Included |
| Lookalike domain detection | Not included | Not included | Not included | Included | Included |
| Bulk-sender compliance | Not included | Not included | Not included | Included | Included |
| Reports & analytics | |||||
| Real-time dashboard | Included | Included | Included | Included | Included |
| Basic analytics | Included | Included | Included | Included | Included |
| Advanced analytics | Not included | Limited | Included | Included | Included |
| Source IP geolocation | Limited | Included | Included | Included | Included |
| Sender identification | Limited | Included | Included | Included | Included |
| PDF / CSV export | Not included | CSV | Included | Included | Included |
| Policy impact simulator | Not included | Included | Included | Included | Included |
| Forensic reports (RUF) | Not included | Included | Included | Included | Included |
| Failure categorization | Not included | Limited | Included | Included | Included |
| Executive PDF reports | Not included | Not included | Included | Included | Included |
| Alerts & notifications | |||||
| Email alerts | Included | Included | Included | Included | Included |
| Slack webhooks | Not included | Included | Included | Included | Included |
| Discord webhooks | Not included | Included | Included | Included | Included |
| Telegram notifications | Not included | Not included | Included | Included | Included |
| Microsoft Teams | Not included | Not included | Included | Included | Included |
| Custom webhooks | Not included | Not included | Limited | Included | Included |
| Custom alert rules | Not included | 3 rules | 10 rules | 25 rules | Unlimited |
| Alert grouping | Not included | Not included | Not included | Included | Included |
| Alert snooze | Not included | Included | Included | Included | Included |
| Dashboard experience | |||||
| Security score dashboard | Included | Included | Included | Included | Included |
| Dashboard presets | 1 preset | 4 presets | 4 presets | 4 presets | Custom |
| Command palette (⌘K) | Included | Included | Included | Included | Included |
| Mobile dashboard | Included | Included | Included | Included | Included |
| Keyboard shortcuts | Included | Included | Included | Included | Included |
| Bulk operations | Not included | Not included | Included | Included | Included |
| Inline editing | Not included | Included | Included | Included | Included |
| Guided onboarding | Included | Included | Included | Included | Included |
| White-label & multi-tenant | |||||
| White-label dashboard | Not included | Not included | Not included | Not included | Available |
| Custom branding | Not included | Not included | Not included | Not included | Available |
| Multi-tenant management | Not included | Not included | Not included | Not included | Optional |
| Client sub-accounts | Not included | Not included | Not included | Not included | Optional |
| Custom domain (CNAME) | Not included | Not included | Not included | Not included | Included |
| Team & collaboration | |||||
| Team members | 1 | 1 | 5 | 10 | Unlimited |
| Team collaboration | Not included | Not included | Included | Included | Included |
| Role-based access | Not included | Not included | Basic | Included | Included |
| Activity audit log | 90 days | 90 days | 90 days | 90 days | Custom |
| API & integrations | |||||
| REST API access | Not included | Included | Included | Included | Included |
| API rate limit | Not included | 1,000/hour | 5,000/hour | 10,000/hour | Custom |
| API keys | Not included | 1 | 3 | 10 | Custom |
| PSA / RMM native modules | Not included | Not included | Not included | Not included | Roadmap |
| SIEM feed | Not included | Included | Included | Included | Included |
| Support & SLA | |||||
| Community support | Included | Included | Included | Included | Included |
| Email support | Not included | Included | Included | Priority | Priority |
| Priority support | Not included | Not included | Optional | Included | Included |
| SLA guarantee | Not included | Not included | Not included | Not included | 99.99% |
| Onboarding | Docs | Docs & video | Email-assisted | Guided | Dedicated |
| Security & compliance | |||||
| SOC 2 Type II infrastructure | Included | Included | Included | Included | Included |
| ISO 27001 infrastructure | Included | Included | Included | Included | Included |
| GDPR-aligned · EU residency | Included | Included | Included | Included | Included |
| Data encryption | Included | Included | Included | Included | Included |
| SSO / SAML / OIDC | Not included | Not included | Not included | Not included | Included |
Reselling to clients? Partner plans include everything in Professional plus white-label and multi-tenant — priced per domain, not per plan.
Add someone who does this all day.
Both sit on top of whichever plan you choose — they add a person, not features. Most teams run the rollout themselves. These are for the ones without a mail admin, or with a date they cannot miss, who would rather buy the outcome than run the rollout. Both are delivered by PlatOps, the managed security team that builds and runs DDMARC.
Managed DMARC
Billed annually · $1,188 per domain per year
A specialist owns your authentication, not a ticket queue.
The same person each month: reading your reports, spotting the sender that appeared last week, and proposing the record change before you have to ask for it.
- A named specialist, and the same one month to month
- Monthly review of what your reports showed
- Record changes drafted for you, published on your approval
- New senders identified and traced before they break alignment
- Forensic (RUF) samples reviewed and alerts triaged for you
- A written monthly report, not just a dashboard
Enforcement sprint
From p=none to p=reject, done with you, not explained to you.
The rollout most teams stall on, done in about 30 days, up to 60 for a complex estate. Every sender found and authenticated, the policy stepped up in stages, and a handover that says how to keep it there.
- Full sender inventory from your own report data
- SPF and DKIM alignment fixed for each legitimate sender, including inside third-party sending platforms where needed
- Policy stepped none → quarantine → reject behind safety gates
- A written handover: what changed, what to watch, what is next
Or a written account of what is blocking reject and what remains. Some senders live in systems that cannot be changed inside a fixed engagement, and enforcing over one of those breaks real mail.
Partner plans are priced per domain, not per plan.
The questions that stop people.
Yes. Monitor covers 2 domains with 30 days of report retention, needs no card and has no expiry date. If we ever change or withdraw it we give 30 days' notice, as our terms say. Move up when you need forensic samples, Slack alerts, a third domain, or 1 year of report retention instead of 30 days.
Protect, Growth and Professional include a 14-day trial. You add a card to start it and we bill on day 15; cancel any time during the 14 days and you are not charged. You can also drop to the free Monitor plan at any point instead of cancelling outright.
You pay for nine months instead of twelve: Protect $261/year, Growth $621/year, Professional $891/year. That is three months free, and the discount applies the moment you switch.
We tell you before it becomes a problem, and existing domains keep receiving reports. Nothing is deleted and no overage is charged — you upgrade when you are ready, or remove a domain you no longer send from.
No. Plans are priced by domain count only. Whether a domain sends a thousand messages a month or ten million, the price does not move and no report is dropped.
Yes. New paid subscriptions carry a 14-day money-back guarantee, and annual plans can be refunded pro rata for unused months on request. The terms page carries the exact wording.
Yes. Upgrades take effect immediately with access to the new features; downgrades apply at your next billing date so you keep what you paid for. Payment by card, PayPal, or invoice with NET 30 on Enterprise.
Start free, or start the trial. Both take two minutes.
The free plan is 2 domains and 30 days of report retention, with no expiry. The trial is the paid plan you would buy, on your real reports, for 14 days. Upgrade the day you need a third domain or forensic samples — not before.