White-label DMARC for the domains you choose.
Provision the hosted customers who opt into email security through the REST API, then run them from a portal on your own hostname. From $99/mo including 25 domains— then a published per-domain rate.
Published partner pricing.
A flat monthly base covers your first 25 domains (Partner Starter) or your first 100 (Partner). Every domain above that is billed at the published per-domain rate — no setup fee, no annual commitment, no domain minimums.
Includes your first 25 domains, then $3.99 per additional domain.
Includes your first 100 domains, then $2.99 per additional domain.
No domain minimums, no annual commitment, cancel any month.
500 active domains
On Partner → $299 + 400 × $2.99 = $1,495/mo. The first 100 domains are covered by the base fee.
10,000 active domains
At list on Partner → $299 + 9,900 × $2.99 = $29,900/mo. Only active domains count, so enrolling a 10,000-domain fleet does not mean billing for 10,000. Partners enrol the customers who opt in — and volume terms are negotiated at this scale, so talk to us first.
From API call to authenticated mail.
Four steps, all available today through the REST API or the web dashboard. No agent to install and nothing to run on your servers.
Create the client organisation
One API call creates an isolated tenant for a hosting customer. Their domains and reports stay separated from every other client.
Provision the domains you choose
Enrol the domains whose owners opted into email security. The API returns the DNS record to publish in the zone you already control.
Reports start flowing
Email providers begin sending DMARC reports. Each provisioned domain gets its own analytics view in the dashboard.
Hand over the portal
Customers sign in to your white-label portal on your own hostname to see posture, senders, and what to fix.
Bulk provisioning over the REST API.
Create a tenant per hosting customer, enrol the domains that opted in, publish one DNS record per domain in the zone you already control. Scriptable end to end.
One tenant per hosting customer
POST /api/v1/msp/customers creates an isolated client organisation. Domains, reports, and portal access all hang off it.
- Isolated per-customer data
- Portal login per customer
- Rename or remove from the API
- Per-client domain breakdown
Provision the domains you choose
POST /api/v1/msp/customers/{id}/domains enrols a domain under a client and returns the DNS record to publish. Script it against the accounts that opt in.
- Scriptable enrolment
- Returns the record to publish
- Idempotent per domain
- Remove a domain to stop billing it
Scoped API keys
Issue read, write, or admin keys and send them in the X-API-Key header. No screen-scraping, no shared dashboard password.
- Read / write / admin scopes
- Per-key expiry and last-used
- Rotate or revoke from the API
- Outbound webhooks for events
# 1. Create the client organisation for a hosting customer
curl -X POST "https://api.ddmarc.com/api/v1/msp/customers" \
-H "X-API-Key: $DDMARC_API_KEY" \
-d '{"name":"Acme Ltd","slug":"acme","admin_email":"it@acme.com"}'
# 2. Enrol each domain that opted into email security
curl -X POST "https://api.ddmarc.com/api/v1/msp/customers/acme/domains" \
-H "X-API-Key: $DDMARC_API_KEY" \
-d '{"domain":"acme.com"}'
# 3. Publish the returned DMARC record in the zone you hostNo control-panel module exists yet.
There is no cPanel add-on, no WHM server plugin, and no WHMCS, Blesta, or HostBill billing module — not in beta, not behind a waitlist. Every hosting partner running DDMARC today provisions through the REST API above. We would rather say that plainly than sell you a screenshot.
Panel and billing modules are on the roadmap. Which one we build first is a demand question, and right now the honest answer is that we do not know. So tell us: how many domains do you host, what share of your customers would take email security as an add-on, and which panel and billing system do you run? That is the whole ask — no demo call required.
Complete email security for every domain.
All six services included on every partner plan. No add-ons, no per-feature pricing.
DMARC monitoring
Aggregate and forensic report processing with actionable insights for every hosted domain.
- Aggregate report parsing
- Forensic report decoding
- Policy recommendations
- Compliance posture
MTA-STS hosting
Managed MTA-STS policy hosting to protect inbound mail from downgrade attacks.
- Automatic certificate management
- Policy hosting on global CDN
- Zero maintenance
- Instant deployment
BIMI hosting
Host brand logos for email authentication with BIMI for your customers' domains.
- SVG logo hosting
- VMC certificate support
- CDN-delivered globally
- Automatic validation
SPF / DKIM monitoring
Track SPF and DKIM configuration with alerts on misconfigurations across all domains.
- SPF record validation
- DKIM selector monitoring
- Configuration alerts
- Best-practice checks
DNSSEC & DANE monitoring
Track DNSSEC validation and DANE/TLSA records for hosted mail domains alongside DMARC posture.
- DNSSEC chain validation
- DANE/TLSA record checks
- Certificate match advisories
- Change alerting
TLS-RPT reporting
Collect and analyse TLS reporting data for email transport security visibility.
- Report collection
- Failure analysis
- Trend tracking
- Provider insights
Built for hosting scale.
Manage thousands of domains with tools shaped for hosting providers.
Multi-tenant dashboard
Manage all hosted domains from a single dashboard with granular access controls and per-customer views.
White-label portal
Point a CNAME at connect.ddmarc.com, prove ownership with a TXT record, and serve the customer portal from your own hostname with your logo and colors.
REST API & webhooks
Scoped API keys over the X-API-Key header cover domain provisioning, posture reads, and report data. Outbound webhooks push alert events into your own systems.
Exportable reporting
Audit-ready posture PDFs on demand plus CSV export of aggregate report data, so you can attach evidence to your own customer reporting.
Published partner pricing
A flat monthly base plus a published per-domain rate above your included allotment. No setup fee, no annual commitment.
Real-time alerts
Notifications for authentication failures, DNS record changes, and policy drift across every provisioned domain — by email, webhook, Slack, Discord, or Teams.
Wiring into your hosting stack.
Two integration surfaces ship today: the REST API and outbound webhooks. Everything else on this list is roadmap, and the chips say so.
Need a custom integration? Talk to our team
Frequently asked questions.
From spoofed to enforced.
Billed when your 14-day trial ends · cancel anytime before then
Frequently asked questions
Explore more
Other solutions, comparisons, and pricing to help you choose.