Buying for NHS, local government, or a UK public body?
Skip the plans below. We do bespoke. UK hosting and EU AI routing on request, public-sector billing terms, and a named contact.
Minimal personal data, tenant isolation, audit-ready controls. See our security posture before you raise the DPIA.
Simple, transparent pricing
Start for free and upgrade when you are ready. All prices exclude VAT. No hidden fees.
30-day free trial on every paid plan, no card required
AI tools are free with no sign-up. Why our free tier is genuinely free.
You can't lose money finding out
- 30-day free trial, no card required
- 30-day money-back guarantee on annual plans
- Cancel anytime
Every annual plan's 30-day money-back guarantee runs from the day you pay, so a trial followed by annual gives you up to 60 days to be sure. Refunded in full, no questions asked.
Migrating from NCSC Mail Check? All plans include DMARC aggregate report processing with 1 year data retention. See our migration guide.
Starter
Free tools plus DMARC, SSL, lookalike and Security Grade monitoring for one domain.
- 20 free security tools
- 1 DMARC domain monitored
- 10,000 messages/month
- 1 year data retention
- Threat model only (no deep AI review)
- 1 SSL monitor
Professional
£600/year (save £240)
For IT teams managing up to 25 domains with full monitoring.
- Everything in Starter
- 25 DMARC domains
- 1,000,000 messages/month
- 1 year data retention
- SSL, DNS & uptime monitoring
- DMARC tasks you can act on
- Scheduled email reports
- 5 team members
MSP
£1,200/year (save £360)
For MSPs and agencies managing client infrastructure at scale.
- Everything in Professional
- 100 domain slots included
- 5,000,000 messages/month
- Brand protection: TLD variants free
- Unlimited monitors & team members
- Expand in buckets of 50 for £40/mo
- Priority email support
All future features ship free to MSP customers first.
Start free trialEnterprise
For formalised requirements, not a volume trapdoor. Everyone else scales on published MSP + £40 expansion buckets.
Enterprise is the right fit when you need
- A contractual SLA and uptime credits
- Dedicated regional hardware hosting (UK, EU, or other)
- EU-only AI routing for all analysis calls
- Specific compliance frameworks (e.g. a customer auditor requirement)
- SSO / SAML and JIT provisioning
- Extended data retention beyond 1 year
- Dedicated account manager
- Company
- UK based
- Hosting
- EU default, UK on request
- Reports
- Full RUA and RUF, including forensic samples
- Install
- One DNS record. No agent, no proxy.
Compare plans
Swipe sideways to see every plan - the feature column stays pinned.
| Feature | Starter | Professional | MSP | Enterprise |
|---|---|---|---|---|
| Limits | ||||
| DMARC Domains | 1 | 25 | 100* | Unlimited |
| Monthly DMARC Messages Authenticated messages only (spoofed mail excluded). Industry-leading volume on MSP. Not a hard cap: reports keep parsing if you go over and nothing breaks. | 10,000 | 1,000,000 | 5,000,000 | Custom |
| Data Retention | 1 year | 1 year | 1 year | Custom |
| SSL Monitors One per verified domain | 1 | 25 | 100 | Unlimited |
| Uptime Monitors One per verified domain | No | 25 | 100 | Unlimited |
| Team Members | 1 | 5 | Unlimited | Unlimited |
| Features | ||||
| Free Lookup Tools | Yes | Yes | Yes | Yes |
| DMARC Aggregate Reports | Yes | Yes | Yes | Yes |
| AI Threat Analysis Our proprietary threat model classifies every DMARC report row (IP reputation, ASN, alignment shape, volume, cross-domain behaviour). On paid tiers, AI reasons on top of the enriched context. On-demand only, never automated. | Threat model only | Threat model + AI | Threat model + AI | Threat model + AI |
| Scheduled PDF Reports | No | Yes | Yes | Yes |
| DNS Health Monitoring | No | Yes | Yes | Yes |
| SPF Flattener | No | Yes | Yes | Yes |
| Domain Expiry Monitoring Alerts before domains or certs lapse | No | Yes | Yes | Yes |
| DMARC Tasks You Can Act On Prioritised steps to advance each domain | No | Yes | Yes | Yes |
| Brand Protection (TLD Grouping) Alternate TLDs count as one slot | - | - | ✓ | ✓ |
| Lookalike Domain Scanning | Yes | Yes | Yes | Yes |
| Dedicated Account Manager | - | - | - | ✓ |
| Coming Soon | ||||
| Dynamic SPF Auto-maintained include, no re-flattening ever | No | No | Coming soon | Coming soon |
| Dark Web Monitoring Credential & domain exposure alerts | No | No | Coming soon | Coming soon |
| Pricing | ||||
| Monthly | Free | £70/mo | £130/mo | Contact us |
| Annual (per month) | Free | £50/mo | £100/mo | Contact us |
The price you see is the price you pay
Most DMARC platforms start cheap, then stop publishing pricing above their first or second tier. The moment your domain count or message volume grows, you are in a sales cycle, a step-function upgrade (commonly 5x to 10x the previous tier), or a vague “contact sales” quote. That is predatory by design: the buyer cannot estimate cost of service upfront, so every conversation starts from the vendor's anchor.
ShieldMarc publishes every tier including the expansion bucket. Need more than 100 domains or 5 million messages? The price is £40/month per expansion bucket (50 domains + 5 million messages each). Posted, predictable, no negotiation needed. No metered overage fees. No surprise invoice the month your volume spikes. If you are consistently over your plan for three months in a row, sales reaches out and you decide the next move together.
Enterprise exists for real enterprise needs, not as a volume trapdoor: formalised SLAs, dedicated regional hardware hosting, EU-only AI routing, or specific compliance frameworks your auditor requires. It is not a surprise you are forced into because you added too many domains: MSP covers up to 100, and expansion buckets take you well beyond that. You can estimate the cost of service with ShieldMarc before picking up the phone. We respect your time and ours; no long-winded negotiation meetings where you are quoted an unreasonable number.
We can hold these prices because we run our own stack. ShieldMarc operates its own database, authentication and monitoring infrastructure rather than renting them from third-party managed platforms, which strips out a layer of vendor fees that legacy tools pass straight through to your bill. Why modern DMARC costs less.
How we compare
ShieldMarc vs the typical DMARC monitoring platform, at each tier. One table, one scan. Competitor figures from each vendor's public pricing page at the time of the most recent review (April 2026).
| Feature | Typical competitor | ShieldMarc |
|---|---|---|
| Free tier | ||
| Domains | 1 | 1 |
| Data retention | 10 days | 1 year |
| AI threat analysis | Paid only | Included |
| Free security tools 4 include plain-English AI explanations | Limited | 20 tools |
| First paid tier biggest savings | ||
| Price e.g. EasyDMARC Plus ~£31/mo annual, dmarcian Basic ~£19/mo | ~£19 to £40/mo | £50/mo (annual, 25 domains) |
| Domains included | 2 | 25 |
| Cost per domain | ~£10 to £20/domain/mo | £2/domain/mo (annual) |
| Monthly message volume Competitor entry tiers are tightly capped | 100,000 | 1,000,000 |
| Analysis engine We run both: our own threat model enriches the context, then AI reasons over it | In-house scoring only | Proprietary threat model + AI |
| SSL monitoring | Typically not included in DMARC tier | All 25 domains |
| DNS, DNSSEC, MTA-STS, TLS-RPT, CAA, lookalike | Partial or add-on per platform | All included on paid tiers |
| Top published tier MSP scale | ||
| Price at 100 domains dmarcian Enterprise (15 domains) is ~£480/mo; EasyDMARC / Valimail are custom quote with no published rate | Custom quote (sales-led) | £100/mo (annual) |
| Monthly message volume dmarcian Enterprise caps at 5M messages on the published tier | Up to 5M (tier-specific) or custom | 5,000,000 (expandable in +5M buckets) |
| Overage handling | Hit a cap, take the next tier (often a step-function price jump) or sales contact | No hard cap, 3-month grace, no surprise billing |
| Pricing transparency | Published rates end here; everything above is custom quote | Published, including expansion (+50 domains +5M messages for £40/mo) |
| Team members | Per-seat or sales-led | Unlimited |
| Brand TLD grouping | Not advertised | Included |
| Enterprise tier | ||
| What Enterprise means ShieldMarc Enterprise exists for real enterprise requirements, not a volume trapdoor | Triggered by volume caps on the published tier. Used to force bigger deals when you outgrow the listed plan. | Triggered by formal SLA, regional hardware hosting, EU-only AI routing, or specific compliance frameworks. Standard scale stays on published MSP + expansion buckets. |
| Can you estimate your cost upfront? | No. Published pricing stops at the tier above which most growing MSPs land. | Yes, for every standard case. Published MSP + £40/bucket covers any volume or domain count. Enterprise quote is only for SLA/hosting/compliance specifics. |
Competitor figures reflect each platform's own public pricing page at the time of this page's most recent review (April 2026): easydmarc.com/pricing, dmarcian.com/pricing, valimail.com/pricing. Exchange rates are approximate (EUR~£0.84, USD~£0.78). Pricing changes; verify current rates directly with each vendor.
Full side-by-side comparisons: ShieldMarc vs EasyDMARC · vs dmarcian · vs Valimail
Free trial: Every paid plan includes a 30-day free trial. No credit card required. One trial per organisation.
Money-back guarantee: Whenever you start an annual plan (converting from a free trial, or switching up from monthly), the 30 days run from the date you pay. Cancel within 30 days of that annual payment and we refund it in full, no questions asked.
Annual billing: Pay annually and save up to 29%. Annual plans are billed upfront for the full year.
Data retention: All plans include 1 year of data retention for DMARC reports, changelogs, and monitoring history.
Monthly messages (no hard cap, no surprise billing): Only authenticated messages count towards your plan limit. Spoofed or unauthorised messages that fail DMARC are never counted, so you are not penalised for being targeted. If you go over, nothing breaks: reports continue to parse, dashboards stay live, alerts keep firing. We do not charge overage fees. If you are consistently over your plan for three months in a row, a sales contact will reach out to suggest an expansion bucket. Your invoice never changes without a conversation first.
Migrating from NCSC Mail Check: All plans include DMARC aggregate report processing. The Starter plan covers one domain free. Professional covers 25. See our migration guide for step-by-step instructions.
Downgrade: If you downgrade, resources beyond your new plan limits are suspended (not deleted). Upgrade again to restore them.
VAT: Prices shown exclude UK VAT, which will be added at checkout where applicable.
*MSP expansion bucket: MSP includes 100 domain slots and 5 million DMARC messages per month. Need more? Each expansion bucket at £40/month adds another 50 domain slots and another 5 million messages. All tools, monitors and team seats remain unlimited.
Brand protection (MSP plan): TLD variants of the same brand (e.g. example.com and example.co.uk) count as a single domain slot at no extra cost on the MSP plan. We encourage MSPs to monitor every defensive and alternate TLD for each client. It strengthens their security posture without inflating your bill.
Enterprise: For organisations with custom domain counts, high email volumes, or specific compliance requirements. Enterprise includes unlimited data retention and a dedicated account manager. Contact us for a tailored quote.
Questions? Open a ticket.