Your DMARC reports
are already being sent.
You just are not reading them. Google, Microsoft, and Yahoo have been filing daily reports on who is sending email as your domain. ShieldMarc parses them, correlates them, and tells you which sender broke what.
One broken DKIM selector.
1,097 silent failures.
Four senders, 28,147 messages, 1,142 alignment failures. 1,097 trace back to a single Google Workspace selector your vendor changed without telling you. ShieldMarc connects the report data to the cause, the fix, and the DNS change you need to make.
- Every sender identified - Google, Microsoft, Mailchimp, Yahoo, and anything else.
- Which selector, which IP, which policy change explains each failure.
- What to do next, in plain English, before your clients notice.
acme-industries.co.uk, example domain
Messages
28,147
Aligned
27,005 (96%)
Failed
1,142
Senders
4
| Sender | Messages | Aligned | Failed | Status |
|---|---|---|---|---|
Google Workspace google.com | 12,400 | 11,303 | 1,097 | Investigate |
Microsoft 365 outlook.com | 9,800 | 9,800 | 0 | Pass |
Mailchimp mcsv.net | 2,847 | 2,810 | 37 | Minor |
Yahoo yahoodns.net | 3,100 | 3,092 | 8 | Minor |
- Investigate
Google Workspace
google.com
12,400 msgs11,303 aligned1,097 failed
- Pass
Microsoft 365
outlook.com
9,800 msgs9,800 aligned0 failed
- Minor
Mailchimp
mcsv.net
2,847 msgs2,810 aligned37 failed
- Minor
Yahoo
yahoodns.net
3,100 msgs3,092 aligned8 failed
ShieldMarc found
Your Google Workspace stream has been failing DKIM alignment since Apr 17. A new selector, google-v2, started signing outbound mail after a workspace update, and it is not in your sender list. 1,097 messages affected this week.
Fix: add google-v2._domainkey to DNS, or switch the workspace back to the original selector. Step-by-step walkthrough included.
Illustrative data. Your reports, your senders, your findings.
Up and running in minutes
Add a domain, change one DNS record, and reports start landing in the dashboard within 24 to 48 hours. No agent, no proxy, no traffic rerouting.
Add your domains
Add domains one by one or in bulk. ShieldMarc automatically detects TLD variants and domain types.
Update your DNS
Add the DMARC reporting address ShieldMarc gives you. Reports start arriving within 24 to 48 hours.
Get alerted
SSL expiry, DNS changes, DMARC failures, spoofing attempts. You hear about problems before your clients do.
We audit the industry. Not just our own customers.
Our Q1 2026 audit of 192 UK Managed Service Providers found 80% had an unprotected alternate brand domain, and only 9% achieved an Excellent rating once brand protection was factored in. Public data, public methodology, and an uncomfortable read for the industry.
Read the UK MSP DMARC AuditSimple, transparent pricing
Flat fee, not per-domain. 5 million DMARC messages per month on MSP, expandable in published buckets. Cancel anytime from your dashboard.
All prices exclude VAT. On the MSP plan, TLD variants of the same brand (e.g. .com and .co.uk) count as one slot.
Starter
- 20 free security tools, no sign-up
- 1 monitored domain · 10,000 messages/month
- 1 SSL monitor · 1 year data retention
- Threat model only (no deep AI review)
Professional
£588/year (save £240)
- 25 domains · 1,000,000 messages/month
- DMARC, SSL, DNS and uptime monitoring
- White-label PDF reports · 5 team members
- 1 year data retention
MSP
£1,188/year (save £360)
- 100 domains* · 5,000,000 messages/month
- Brand TLD grouping (e.g. .com + .co.uk = 1 slot)
- Unlimited team members · Priority support
* MSP: expand in buckets of 50 domains for an extra £39.99/month.
See full pricing and featuresAll prices exclude VAT.
Start reading your reports.
A free trial on any paid plan. No card, no agent, nothing to install. Point your RUA at ShieldMarc and a populated dashboard is waiting for you inside a couple of days.