DMARC Monitoring
DMARC reports are XML files that nobody reads. We decode them into a dashboard that shows you every service, server, and sender using your domain — and whether they're authorised.
DMARC · Senders
acme.com · last 30 days
Top Senders
Unauthorised sender detected
185.244.9.17 · 3 hrs ago
How it works
A single TXT record at _dmarc.yourdomain.com tells inboxes where to send aggregate reports.
Gmail, Yahoo, Microsoft, Apple and every major ISP send us daily aggregate reports about mail claiming to be from your domain.
One compliance number. A breakdown by sender. Every IP with its PTR, SPF & DKIM alignment. No XML in sight.
Feature 01 · Senders Dashboard
Compliance at a glance, then drill in. Every sender grouped by status, with SPF and DKIM alignment on every row.
Disposition
Compliant Senders
Failed Senders
Feature 02 · Sender Intelligence
Every IP in your DMARC reports is joined against a curated database of known email infrastructure. You see service names, not CIDR blocks.
Feature 03 · Report Coverage
A heatmap shows which organisations have sent you aggregate reports on which days. Gaps mean reports are missing — usually a DNS misconfiguration.
| Provider | Apr 9 | Apr 10 | Apr 11 | Apr 12 | Apr 13 | Apr 14 | Apr 15 | Apr 16 | Apr 17 | Apr 18 | Total |
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|
524 | 498 | 531 | 487 | 512 | 493 | 541 | 507 | 519 | 4,612 | |
|
|
87 | 91 | 104 | 78 | 93 | 99 | 108 | 85 | 96 | 841 | |
|
|
201 | 189 | 215 | 198 | 207 | 194 | 211 | 203 | 196 | 1,814 | |
|
|
42 | 38 | 45 | 41 | 39 | 44 | 37 | 43 | 40 | 369 | |
|
|
18 | 22 | 19 | 21 | 17 | 23 | 20 | 18 | 158 | ||
|
|
8 | 11 | 9 | 12 | 7 | 10 | 9 | 11 | 8 | 85 | |
|
|
5 | 7 | 6 | 4 | 8 | 5 | 6 | 7 | 48 |
Feature 04 · IP Drilldown
When you find a problem at the sender level, drill into the individual IPs. PTR reverse lookups identify servers. Reporter columns show which ISPs flagged what.
PTR reverse lookup
Auto-resolves every source IP to its hostname.
Grouped by sender suffix
All *.cloudmailin.net IPs collapse into one expandable row.
Filter by reporter & From header
Focus on a specific ISP's reports or a specific domain.
Structured Reports
Every DMARC snapshot exports as clean, structured markdown. Feed it to your AI assistant for analysis, paste it into a compliance ticket, or share a versioned URL with your team. Machine-readable by default, human-readable when you need it.
Structured for AI — paste into ChatGPT, Claude, or your internal tools
Full compliance summary with sender breakdown
Disposition & policy detail per domain
Versioned URL — share by link, no attachment needed
## DMARC Report — acme.com Period: Apr 01 – Apr 14, 2026 ### Compliance Overall: 94.2% compliant (12,487 emails) Trend: +2.1% vs previous period ### Disposition Accepted: 11,482 (91.9%) Quarantine: 683 (5.5%) Rejected: 322 (2.6%) ### Top Senders | Sender | Count | SPF | DKIM | |-------------------|-------|------|------| | google.com | 6,841 | pass | pass | | cloudmailin.net | 2,104 | pass | pass | | zendesk.com | 927 | pass | pass | | 185.244.9.0/24 | 412 | fail | fail |
Why DMARC matters
Since February 2024, Gmail and Yahoo require valid DMARC for bulk senders. Microsoft is following. Without visibility into who's sending as you, you're guessing at your reputation.
DMARC aggregate reports contain the answer — but they're delivered as XML, one file per provider per day, and they're unreadable without tooling.
CloudMailin turns them into a dashboard. Compliance percentage. Sender breakdown. Threat detection. One number that tells you whether your domain is healthy, every day.
What you'll catch
Domain spoofing
Someone sending as you without permission
Stale DKIM keys
Old keys still signing, new ones not rotated in DNS
Shadow IT sending
Marketing uses a SaaS you didn't authorise
Misconfigured SPF
Record missing includes for services you actually use
What's different
Built for engineers who want answers, not spreadsheets.
Most tools show reports. We show who's sending — 100+ services identified by name, not IP.
Reports ingested as they arrive. Dashboard reflects today's data, not last Monday's digest.
Share with ops and security without screenshots. Paste straight into Confluence or a ticket.
Use us with any mail provider. No lock-in, no sending switch required to start monitoring.
One platform
DMARC monitoring pairs naturally with your existing CloudMailin email. Send outbound via our SMTP? Your reports are already structured. Receive inbound via webhooks? You know our platform.
Receive via HTTP webhook. Parsed JSON, attachments extracted, POST to your endpoint.
Learn more →Transactional via API or SMTP. DKIM signing, bounces, delivery tracking built in.
Learn more →Dashboard + sender intel + threat detection. Works with any email provider, not just ours.
Get started →Setup
Add this TXT record at your DNS provider. Reports will start arriving within 24 hours.
Works with any mail provider — Google Workspace, Microsoft 365, Fastmail, your own server.
Trusted infrastructure
16+
Years running
99.99%
Uptime
12M+
Emails analysed / month
Free
To get started
Testimonials
Andreas Santoro
CTO, ExpressSteuer
CloudMailin has been instrumental in our growth at ExpressSteuer. The system is not only incredibly easy to implement, but also highly reliable and robust. What's more, their support team is simply amazing - always quick to respond and provide effective solutions to any challenge we encounter. We couldn't be more pleased with the service provided by CloudMailin!
Dan
CamelCamelCamel.com
Thanks for the rock solid decade
Francisco (Kiko) R.
Head of Engineering, ProFinda.com
The product is perfect, feature rich, nice and intuitive UI and great support. It was really easy to integrate it into our application. It enables our application to receive inbound traffic, to give better support to clients and to expand our mailing options.
FAQ
Start monitoring your domain
Free to start. One DNS record. First report within 24 hours.