Google, Yahoo & Microsoft require DMARC. Learning it is optional.
DMARC enforcement
in 90 days. Guaranteed.
UseDMARCReport is DuoCircle's done-with-you DMARC service: you don't need to learn email authentication, because a dedicated engineer runs the project and makes every enforcement decision while your team pastes a handful of DNS changes. Your domain goes from p=none to p=quarantine in 90 days for a one-time $3,900, guaranteed in writing.
reports pile up unread in your inbox
reports flow to your reporting tool, read by an engineer
A real engagement's outcome: enforcement, verified by data.
The #1 complaint about DMARC reporting tools
“I can see the reports. I just don't know what to do with them.”
Maybe the reports pile up unread in dmarc@your-domain.com, zipped XML nobody has time to open. Maybe you have a tool and a dashboard full of failures nobody triages.
Either way your policy is still p=none,
because knowing you have a problem and safely fixing it are different jobs, and you have fifteen other priorities.
80% of domains with a DMARC record never reach enforcement.
Reporting alone
- × A dashboard full of failures, no one to say which ones matter
- × Afraid to enforce, one wrong move breaks legitimate email
- × Months (or years) at p=none while spoofing continues
With a human in the loop
- ✓ Every failure triaged: real problem or ignorable noise
- ✓ You enforce when the data says it's safe, not before, not never
- ✓ p=quarantine in 90 days, in writing, or we keep working free
We built the highest-rated DMARC reporting platform on G2, then watched customers stall at p=none anyway. It isn't a technology problem. It's a guidance problem. So we staffed it.
The 90-day path to enforcement
Five steps, and a human verifies every one before the next. You'll know where you are on this map every week.
- 1Day 1
Free audit, and your reporting, running
We pull your DMARC, SPF, and DKIM records live and show you exactly who is sending as your domain. On the same call we set up your free year of DMARC reporting, one DNS edit, and reports flow to a dashboard instead of piling up unread in dmarc@. Yours to keep whether you hire us or not.
- 2Week 1
Roadmap
Every sending service mapped, every failure diagnosed, and a prioritized action list, not a 40-page PDF.
- 3Weeks 2–6
Fix, align, authenticate
SPF flattening, DKIM signing for every service, alignment fixes. Your team pastes the DNS changes we hand you; we verify each one. About 30 minutes of your time per week.
- 4Weeks 6–12
Monitor and stabilize
Pass rates climb; weekly reports keep you and your leadership informed. When legitimate senders hold above 95%, the data says it's safe.
- Day 90
Enforce
p=quarantineYou publish p=quarantine. Spoofed mail stops reaching inboxes. You get a compliance report for your board, auditors, and insurance carrier.
An assigned engineer who knows your senders by name, not a ticket queue, not a chatbot, not a dashboard that wishes you luck.
Every DNS change is verified against live report data before the next step. Nothing ships on hope.
A human makes the enforcement call when the data says it's safe, and stands behind it in writing.
Transparent pricing. One guarantee.
If you do the work with us, we guarantee your domain reaches enforcement with a 95%+ pass rate, or we keep working at no charge until it does. Full engagement requirements.
Monitor it yourself
The DMARC Report platform: dashboards, aggregate and forensic reports, alerting. The right start if you have DMARC expertise in-house.
Free for 1 year when you take the audit call.
Start monitoringDone With You
An assigned engineer runs your project to p=quarantine in 90 days. You keep DNS control; we never need access to your systems.
- DMARC audit and a prioritized implementation roadmap
- SPF flattening and DKIM alignment for every sending service
- MTA-STS and TLS-RPT setup
- 4 milestone calls with your assigned engineer (45 min each)
- 1 year of the DMARC Report platform, weekly reports, alerts, up to 5M messages/month
- Board-ready compliance report for auditors and insurance carriers
- BIMI readiness and inbox placement testing
- 24/7 technical support with SLA
15 minutes. You'll see your own data before spending anything.
Path to Reject
For organizations whose mandate or carrier requires full p=reject. Six months, maximum protection.
- Everything in Done With You
- Quarantine → reject transition and stabilization
- 6 milestone calls across the 6-month engagement
- 30 days of active post-reject monitoring
- Unlimited report volume and dedicated escalation support
- Advanced BIMI/VMC certificate guidance
Volume discounts: 15% off 2 domains · 25% off 3–5 · 35% off 6+. Same price for every organization.
Procurement ready
Bring us to your security review and purchasing team. The paperwork is already done.
- ✓SOC 2 Type 2 · report available under NDA
- ✓Mutual NDA signed on request
- ✓DPA for GDPR · data hosted in Germany
- ✓Signed engagement letter with defined scope and guarantee
- ✓Purchase orders accepted · we work with your process
- ✓Security questionnaire pre-answered in our CSA STAR entry
Zero access risk: we never need credentials or access to your systems. Full scope in the engagement requirements.
What security teams say
“A vendor made a bank wire to pay an invoice apparently issued by a client. But it was all a scam! The email didn't come from finance. Setting up email protection correctly and then monitoring emails is exactly why we choose to use this service.”
“What I like most is seeing the daily reports and watching the non-compliant number decrease as you resolve the issues and being able to finally change the policy from monitoring to reject.”
Read 500+ verified reviews on G2 →
Frequently asked questions
Done reading about DMARC?
Hand it to an engineer.
MSP or channel partner? 50% partner pricing, white-labeled everything →