Skip to content
DDMARC
Six pages · one product · same price list

Same product on every one of these pages. What changes is who has to approve it.

A six-card grid implies six products. There is one — the difference between these pages is which evidence you need, who signs the purchase, and which questions your auditor asks. Tell us your shape and your sector and we will point you at the right page, in the right order.

01 — Find your page

Two questions, then read only what applies.

First — what shape are you?
Then — regulated sector? Optional
Small business

Start with the sender list, not the policy.

At your size nobody is watching the domain, which is the actual risk — not that you have configured DMARC wrongly. The small-business page is written for someone who does not want to learn what SPF stands for, and it includes the registrar screens you will be looking at.

Read in this order
01Small businessThe mechanics, written for someone who does not want to learn what SPF stands for — including the registrar screens you will be looking at.
The thing that will slow you down

Getting DNS access. Not the technical work — finding out who set up your domain and whether they still work with you.

Where you would start payingFree, then $29 if you outgrow 2 domains
02 — Before you read any of them

Most of what you are buying does not change.

Segment pages are a marketing convenience. The thing to say up front is that a hospital and a bakery get the same platform. If a vendor implies otherwise, ask which build you are on — the answer is usually “the same one”.

There is exactly one functional split: the partner plans add multi-tenancy and white-labeling, because serving other people’s domains is a different job. Everything else on this list is identical across all six pages.

Identical regardless of segment
The same detection engineNine protocols checked identically on every plan, from free upward. No “enterprise-grade” variant of a DNS lookup.
The same published pricesA hospital pays the same $29 as a two-person consultancy. There is no industry surcharge and no segment pricing.
The same setup pathOne DNS record, verified from outside, reports usually within 24 hours, sometimes 48. Identical whether you have one domain or four hundred.
The same free Monitor plan2 domains with 30 days of report retention, no expiry date, no card. Available to every segment on this page.
The same data residency choiceUS or EU, selected at account level on any plan, not reserved for enterprise contracts. Tokyo, HIPAA-eligible (US) and AWS GovCloud (US) on request with an Enterprise agreement.
The same limitsDMARC closes exact-domain spoofing and nothing else. That is true on the healthcare page and the bakery page alike.
03 — What is on each page

Six pages, and the one thing each has that the others do not.

Listed by who it is written for, not by industry vertical, because two of these are company shapes, two are business models, and two are approval processes. Read the one that matches how your purchase gets signed off.

ShapeFree → $29Small businessWritten for an owner or office manager with no security staffThe entry point. Answers “is this my problem?” with five self-assessment questions before asking you for anything.Only on this pageThe registrar walkthrough — actual field names and gotchas for Cloudflare, GoDaddy, Namecheap, Squarespace and Route 53.ShapeProfessional $99 → Enterprise from $499EnterpriseWritten for a security team with procurement behind themWritten for the evaluation, not the product: residency, SSO, audit logging and what your reviewer will ask for.Only on this pageThe artifact list, including which documents exist today, which need an NDA, and which do not exist yet.ModelFrom $119MSP & agenciesWritten for someone selling this as a service lineAbout service-delivery labor, not features, because that is where an MSP’s margin lives.Only on this pageStage-by-stage effort estimates per client profile, split into what the platform automates and what your technician still does.ModelFrom $119Hosting providersWritten for a platform provisioning domains by APIFor volume and automation, where the customer may never see a dashboard at all.Only on this pageThe real API surface — endpoints, request bodies and the per-domain unit economics at scale.ApprovalSame plansHealthcareWritten for a compliance officer or practice managerHIPAA does not name DMARC. This page says so, then explains what auditors increasingly expect anyway.Only on this pageThe mapping from the HIPAA Security Rule to email authentication, with the artifacts an audit will request.ApprovalSame plansFinancial servicesWritten for a CISO answering to examinersLeads with the four ways wire fraud arrives and states that DMARC stops one of them.Only on this pageThe four BEC variants with the headers your gateway sees, and where DDMARC stops being the answer.
04 — One price list

No segment pricing, no industry surcharge.

A hospital pays the same as a 2-person consultancy for the same 5 domains. Published in full, including the partner plans — nothing here is quote-gated below very large volumes.

PlanPriceDomainsWho it is for
Monitor$02 domainsEvaluating, or a single domain you just want watched
Protect$29/mo5 domainsA small business that wants hosted checks and API access
Growth$69/mo15 domainsMulti-brand, and where managed MTA-STS and BIMI hosting start
Professional$99/mo25 domainsTeams moving to enforcement, with AI posture and lookalike detection
EnterpriseFrom $499/moUnlimitedSSO, custom retention and a 99.99% uptime commitment
Partner$119 or $299/mo30 or 100 includedMSPs, agencies and hosting providers reselling to clients

Full comparison, annual pricing and the capability matrix are on the pricing page.

Or skip all six and check your domain.

Every page above eventually tells you to do this. Thirty seconds, no signup, and it answers the only question that matters: whether anyone can send as you today.

Check a domain freeStart free
No account · results in about thirty seconds