--- title: "Done With You DMARC Implementation | UseDMARCReport" description: "Expert-led DMARC implementation that gets your domain to enforcement in 90 days. Guaranteed. We run the project, your team makes the DNS changes." image: "https://usedmarcreport.com/images/og-default.png" canonical: "https://usedmarcreport.com/" --- Google, Yahoo & Microsoft require DMARC. Learning it is optional. # DMARC enforcement in 90 days. Guaranteed. UseDMARCReport is DuoCircle's done-with-you DMARC service: you don't need to learn email authentication, because a dedicated engineer runs the project and makes every enforcement decision while your team pastes a handful of DNS changes. Your domain goes from p=none to p=quarantine in 90 days for a one-time $3,900, guaranteed in writing. Hand it to an engineer: free 15-minute audit Get my free audit Take the call and we'll set up your DMARC reporting **free for a year**. Your reports land in a real reporting tool instead of your dmarc@your-domain.com inbox. \_dmarc.your-domain.com. TXT Day 0 anyone can send as you v=DMARC1; p=none; rua=mailto:dmarc@your-domain.com; reports pile up unread in your inbox Day 90 spoofed mail quarantined v=DMARC1; p=quarantine; pct=100; rua=mailto:you@dmarcreport.com; reports flow to your reporting tool, read by an engineer 97.3% Pass rate 100% Senders aligned 90 Days, guaranteed A real engagement's outcome: enforcement, verified by data. ![Brad Slavin, founder](/team/brad-slavin.jpg) ![Maxim Cujba, DMARC engineer](/team/maxim-cujba.jpg) ![Vasile Diaconu, DMARC engineer](/team/vasile-diaconu.jpg) ![Dan Calkin, escalation engineer](/team/dan-calkin.jpg) [ 4.8/5 on G2 · 500+ reviews](https://www.g2.com/products/dmarc-report/reviews) SOC 2 Type 2 50,000+ domains monitored Meets PCI DSS v4.0, CISA BOD 18-01, HIPAA · [see all compliance requirements](/compliance/) The #1 complaint about DMARC reporting tools ## “I can see the reports. I just don't know what to do with them.” Maybe the reports pile up unread in `dmarc@your-domain.com`, zipped XML nobody has time to open. Maybe you have a tool and a dashboard full of failures nobody triages. Either way your policy is still `p=none`, because knowing you have a problem and safely fixing it are different jobs, and you have fifteen other priorities. 80% of domains with a DMARC record never reach enforcement. ### Reporting alone - × A dashboard full of failures, no one to say which ones matter - × Afraid to enforce, one wrong move breaks legitimate email - × Months (or years) at p=none while spoofing continues ### With a human in the loop - ✓ Every failure triaged: real problem or ignorable noise - ✓ You enforce when the data says it's safe, not before, not never - ✓ p=quarantine in 90 days, in writing, or we keep working free We built [the highest-rated DMARC reporting platform on G2](https://dmarcreport.com), then watched customers stall at p=none anyway. It isn't a technology problem. It's a guidance problem. So we staffed it. ## The 90-day path to enforcement Five steps, and a human verifies every one before the next. You'll know where you are on this map every week. 1. 1 Day 1 ### Free audit, and your reporting, running We pull your DMARC, SPF, and DKIM records live and show you exactly who is sending as your domain. On the same call we set up your free year of DMARC reporting, one DNS edit, and reports flow to a dashboard instead of piling up unread in dmarc@. Yours to keep whether you hire us or not. 2. 2 Week 1 ### Roadmap Every sending service mapped, every failure diagnosed, and a prioritized action list, not a 40-page PDF. 3. 3 Weeks 2–6 ### Fix, align, authenticate SPF flattening, DKIM signing for every service, alignment fixes. Your team pastes the DNS changes we hand you; we verify each one. About 30 minutes of your time per week. 4. 4 Weeks 6–12 ### Monitor and stabilize Pass rates climb; weekly reports keep you and your leadership informed. When legitimate senders hold above 95%, the data says it's safe. 5. Day 90 ### Enforce p=quarantine You publish p=quarantine. Spoofed mail stops reaching inboxes. You get a compliance report for your board, auditors, and insurance carrier. Hands-on An assigned engineer who knows your senders by name, not a ticket queue, not a chatbot, not a dashboard that wishes you luck. Tested Every DNS change is verified against live report data before the next step. Nothing ships on hope. Managed A human makes the enforcement call when the data says it's safe, and stands behind it in writing. ## Transparent pricing. One guarantee. If you do the work with us, we guarantee your domain reaches enforcement with a 95%+ pass rate, or we keep working at no charge until it does.[Full engagement requirements](/requirements/). ### Monitor it yourself $25/mo The DMARC Report platform: dashboards, aggregate and forensic reports, alerting. The right start if you have DMARC expertise in-house. Free for 1 year when you take the audit call. [Start monitoring](https://app.dmarcreport.com/signup?plan=starter) What most teams need ### Done With You $3,900 one-time, per domain An assigned engineer runs your project to p=quarantine in 90 days. You keep DNS control; we never need access to your systems. - DMARC audit and a prioritized implementation roadmap - SPF flattening and DKIM alignment for every sending service - MTA-STS and TLS-RPT setup - 4 milestone calls with your assigned engineer (45 min each) - 1 year of the DMARC Report platform, weekly reports, alerts, up to 5M messages/month - Board-ready compliance report for auditors and insurance carriers - BIMI readiness and inbox placement testing - 24/7 technical support with SLA [Book the free audit first](/demo/) 15 minutes. You'll see your own data before spending anything. ### Path to Reject $12,000 one-time, per domain For organizations whose mandate or carrier requires full p=reject. Six months, maximum protection. - Everything in Done With You - Quarantine → reject transition and stabilization - 6 milestone calls across the 6-month engagement - 30 days of active post-reject monitoring - Unlimited report volume and dedicated escalation support - Advanced BIMI/VMC certificate guidance [Book the free audit first](/demo/) Volume discounts: 15% off 2 domains · 25% off 3–5 · 35% off 6+. Same price for every organization. ### Procurement ready Bring us to your security review and purchasing team. The paperwork is already done. - ✓**SOC 2 Type 2** · report available under NDA - ✓**Mutual NDA** signed on request - ✓**DPA** for GDPR · data hosted in Germany - ✓**Signed engagement letter** with defined scope and guarantee - ✓**Purchase orders accepted** · we work with your process - ✓Security questionnaire pre-answered in our [CSA STAR entry](https://cloudsecurityalliance.org/star/registry/duocircle/services/dmarc-report) Zero access risk: we never need credentials or access to your systems. Full scope in the [engagement requirements](/requirements/). ![G2 Leader Winter 2026](/badges/g2-leader.svg) ![G2 Leader Small Business](/badges/g2-leader-smb.svg) ![G2 Best Estimated ROI](/badges/g2-best-roi.svg) ![G2 Fastest Implementation](/badges/g2-fastest-impl.svg) ![G2 High Performer](/badges/g2-high-performer.svg) ## What security teams say > “A vendor made a bank wire to pay an invoice apparently issued by a client. But it was all a scam!**The email didn't come from finance.**Setting up email protection correctly and then monitoring emails is**exactly why we choose to use this service.**” Digital agency · verified G2 review > “What I like most is seeing the daily reports and**watching the non-compliant number decrease** as you resolve the issues and being able to finally**change the policy from monitoring to reject.**” IT administrator · verified G2 review [Read 500+ verified reviews on G2 →](https://www.g2.com/products/dmarc-report/reviews) SOC 2 Type 2 · report under NDA DMARC data hosted in Germany [CSA STAR registry entry](https://cloudsecurityalliance.org/star/registry/duocircle/services/dmarc-report) [CIS CyberMarket partner](https://www.cisecurity.org/services/cis-cybermarket/duocircle) ## Frequently asked questions What if we have multiple domains? Each domain is a separate engagement. Multi-domain discounts are available, up to 35% off for 6+ domains. Domains can run concurrently so you can protect your entire portfolio on the same timeline. What if we're already at p=quarantine? Great, you’re ahead of most organizations. We offer a "Path to Reject" engagement (approximately 6 months) to get you to full enforcement (p=reject) and ensure your DMARC pass rates stay above 95%. Do you make changes to our systems? No. This is "done with you": we provide expert guidance and your team executes all DNS and configuration changes. We never need access to your systems or credentials. What if we can't complete action items on time? The timeline extends. We work at your pace. The 90-day estimate (Done With You) or 6-month estimate (Path to Reject) assumes action items completed within 5 business days. There’s no penalty for taking longer. What happens after the engagement ends? Your 1-year DMARC Report subscription remains active so you can continue monitoring independently. If you want ongoing support or want to move to p=reject, we’re here. How much does it cost? Engagements start at $3,900 per domain with volume discounts for multiple domains. We’ll discuss specific pricing on your discovery call based on your domain count and requirements. Do you accept purchase orders? Yes. We accept POs, though we prefer credit card for faster onboarding. We’ll work with your procurement process, no hoops. Where can we find your security questionnaire? Our Cloud Security Alliance STAR registry entry covers it. We’re SOC 2 Type 2 certified (report available under NDA), and all DMARC data is hosted in Germany. How do we get started? Book a 15-minute DMARC audit. We’ll pull your DMARC record live, show you who’s sending as your domain right now, and tell you exactly how far you are from enforcement. We’ll also set up DMARC reporting for your domain on the call, free for a year. One DNS edit and your reports land in a dashboard instead of an unread inbox. No commitment either way. ## Done reading about DMARC? Hand it to an engineer. Get my free audit 15 minutes. Reporting set up free for a year on the call. 90 days later, spoofing stops. MSP or channel partner? [50% partner pricing, white-labeled everything →](/partner/) ```json {"@context":"https://schema.org","@type":"Organization","name":"UseDMARCReport","url":"https://usedmarcreport.com","logo":{"@type":"ImageObject","url":"https://usedmarcreport.com/logo.png"},"description":"Expert-led DMARC implementation that gets your domain to enforcement in 90 days. Guaranteed. We run the project, your team makes the DNS changes. SOC 2 Type 2 certified. 50,000+ domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.g2.com/products/dmarc-report/reviews","https://www.linkedin.com/company/duocircle","https://duocircle.com","https://dmarcreport.com","https://www.cisecurity.org/services/cis-cybermarket/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://usedmarcreport.com/demo/"},"knowsAbout":["DMARC Implementation","DMARC Enforcement","Email Authentication","SPF","DKIM","MTA-STS","BIMI","Email Security"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"UseDMARCReport","url":"https://usedmarcreport.com","description":"Expert-led DMARC implementation that gets your domain to enforcement in 90 days. Guaranteed. We run the project, your team makes the DNS changes. SOC 2 Type 2 certified. 50,000+ domains.","publisher":{"@type":"Organization","name":"UseDMARCReport","url":"https://usedmarcreport.com","logo":{"@type":"ImageObject","url":"https://usedmarcreport.com/logo.png"},"description":"Expert-led DMARC implementation that gets your domain to enforcement in 90 days. Guaranteed. We run the project, your team makes the DNS changes. SOC 2 Type 2 certified. 50,000+ domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"ProfessionalService","@id":"https://usedmarcreport.com/#organization","name":"UseDMARCReport","url":"https://usedmarcreport.com","logo":"https://usedmarcreport.com/logo.png","description":"Expert-led DMARC implementation that gets your domain to enforcement in 90 days. Guaranteed.","foundingDate":"2024","sameAs":["https://www.g2.com/products/dmarc-report/reviews","https://www.linkedin.com/company/duocircle","https://duocircle.com","https://dmarcreport.com","https://www.cisecurity.org/services/cis-cybermarket/duocircle"],"parentOrganization":{"@type":"Organization","@id":"https://duocircle.com/#organization","name":"DuoCircle","url":"https://duocircle.com"},"founder":{"@type":"Person","name":"Brad Slavin","jobTitle":"Founder","sameAs":"https://www.linkedin.com/in/bradslavin"},"address":{"@type":"PostalAddress","streetAddress":"5965 Village Way, Suite 105-234","addressLocality":"San Diego","addressRegion":"CA","postalCode":"92130","addressCountry":"US"},"areaServed":"Worldwide","priceRange":"$$","aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"500","bestRating":"5"},"hasOfferCatalog":{"@type":"OfferCatalog","name":"DMARC Implementation Services","itemListElement":[{"@type":"Offer","name":"Done With You DMARC Implementation","price":"3900","priceCurrency":"USD","description":"Expert-led DMARC enforcement in 90 days with guaranteed results."}]}},{"@context":"https://schema.org","@type":"FAQPage","mainEntity":[{"@type":"Question","name":"What if we have multiple domains?","acceptedAnswer":{"@type":"Answer","text":"Each domain is a separate engagement. Multi-domain discounts are available, up to 35% off for 6+ domains. Domains can run concurrently so you can protect your entire portfolio on the same timeline."}},{"@type":"Question","name":"What if we're already at p=quarantine?","acceptedAnswer":{"@type":"Answer","text":"Great, you’re ahead of most organizations. We offer a \"Path to Reject\" engagement (approximately 6 months) to get you to full enforcement (p=reject) and ensure your DMARC pass rates stay above 95%."}},{"@type":"Question","name":"Do you make changes to our systems?","acceptedAnswer":{"@type":"Answer","text":"No. This is \"done with you\": we provide expert guidance and your team executes all DNS and configuration changes. We never need access to your systems or credentials."}},{"@type":"Question","name":"What if we can't complete action items on time?","acceptedAnswer":{"@type":"Answer","text":"The timeline extends. We work at your pace. The 90-day estimate (Done With You) or 6-month estimate (Path to Reject) assumes action items completed within 5 business days. There’s no penalty for taking longer."}},{"@type":"Question","name":"What happens after the engagement ends?","acceptedAnswer":{"@type":"Answer","text":"Your 1-year DMARC Report subscription remains active so you can continue monitoring independently. If you want ongoing support or want to move to p=reject, we’re here."}},{"@type":"Question","name":"How much does it cost?","acceptedAnswer":{"@type":"Answer","text":"Engagements start at $3,900 per domain with volume discounts for multiple domains. We’ll discuss specific pricing on your discovery call based on your domain count and requirements."}},{"@type":"Question","name":"Do you accept purchase orders?","acceptedAnswer":{"@type":"Answer","text":"Yes. We accept POs, though we prefer credit card for faster onboarding. We’ll work with your procurement process, no hoops."}},{"@type":"Question","name":"Where can we find your security questionnaire?","acceptedAnswer":{"@type":"Answer","text":"Our Cloud Security Alliance STAR registry entry covers it. We’re SOC 2 Type 2 certified (report available under NDA), and all DMARC data is hosted in Germany."}},{"@type":"Question","name":"How do we get started?","acceptedAnswer":{"@type":"Answer","text":"Book a 15-minute DMARC audit. We’ll pull your DMARC record live, show you who’s sending as your domain right now, and tell you exactly how far you are from enforcement. We’ll also set up DMARC reporting for your domain on the call, free for a year. One DNS edit and your reports land in a dashboard instead of an unread inbox. No commitment either way."}}]},{"@context":"https://schema.org","@type":"WebPage","name":"Done With You DMARC Implementation","url":"https://usedmarcreport.com/","description":"UseDMARCReport is DuoCircle's done-with-you DMARC service: you don't need to learn email authentication, because a dedicated engineer runs the project and makes every enforcement decision while your team pastes a handful of DNS changes. Your domain goes from p=none to p=quarantine in 90 days for a one-time $3,900, guaranteed in writing.","speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}] ```