Buying for NHS, local government, or a UK public body?
Skip the plans below. We do bespoke. UK hosting on request, public-sector billing terms, and a named contact.
Minimal personal data, tenant isolation, audit-ready controls. See our security posture before you raise the DPIA.
Simple, transparent pricing
Start for free and upgrade when you are ready. All prices exclude VAT. No hidden fees.
30-day free trial with 10 domains, no card required
AI tools are free with no sign-up. Why our free tier is genuinely free.
You can't lose money finding out
- 30-day free trial, no card required
- 30-day money-back guarantee on annual plans
- Cancel anytime
Every annual plan's 30-day money-back guarantee runs from the day you pay, so a trial followed by annual gives you up to 60 days to be sure. Refunded in full, no questions asked.
Migrating from NCSC Mail Check? All plans include DMARC aggregate report processing with 1 year data retention. See our migration guide.
Starter
Free tools plus DMARC reporting, one SSL monitor and a security grade for one domain.
- 20 free security tools
- 1 DMARC domain monitored
- 10,000 messages/month
- 1 year data retention
- Threat model only (no deep AI review)
- 1 SSL monitor
Professional
£600/year (save £240)
For IT teams managing up to 25 domains with full monitoring.
- Everything in Starter
- 25 DMARC domains
- 1,000,000 messages/month
- 1 year data retention
- SSL, DNS & uptime monitoring
- DMARC tasks you can act on
- Scheduled email reports
- 5 team members
MSP
£1,200/year (save £360)
For MSPs and agencies managing client infrastructure at scale.
- Everything in Professional
- 100 domain slots included
- 5,000,000 messages/month
- Brand protection: TLD variants free
- Unlimited monitors & team members
- Expand in buckets of 50 for £40/mo
- White-label PDF reports
All future features ship free to MSP customers first.
Start free trial on the MSP planEnterprise
For formalised requirements, not a volume trapdoor. Everyone else scales on published MSP + £40 expansion buckets.
Enterprise is the right fit when you need
- A contractual SLA and uptime credits
- Dedicated regional hardware hosting (UK, EU, or other)
- Specific compliance frameworks (e.g. a customer auditor requirement)
- Extended data retention beyond 1 year
- Dedicated account manager
- Company
- UK based
- Hosting
- EU default, UK on request
- Reports
- Full RUA and RUF, including forensic samples
- Install
- One DNS record. No agent, no proxy.
Compare plans
Swipe sideways to see every plan - the feature column stays pinned.
| Feature | Starter | Professional | MSP | Enterprise |
|---|---|---|---|---|
| Limits | ||||
| DMARC Domains | 1 | 25 | 100* | Unlimited |
| Monthly DMARC Messages We do not count messages against this figure, so spoofed mail sent as your domain cannot use it up. Not a hard cap: reports keep parsing if you go over and nothing breaks. | 10,000 | 1,000,000 | 5,000,000 | Custom |
| Data Retention | 1 year | 1 year | 1 year | Custom |
| SSL Monitors One per hostname on a domain you have added | 1 | 25 | 100 | Unlimited |
| Uptime Monitors One per URL on a verified domain | No | 25 | 100 | Unlimited |
| Team Members | 1 | 5 | Unlimited | Unlimited |
| Features | ||||
| Free Lookup Tools | Yes | Yes | Yes | Yes |
| DMARC Aggregate Reports | Yes | Yes | Yes | Yes |
| AI Threat Analysis Our proprietary threat model classifies every DMARC report row (IP reputation, ASN, alignment shape, volume, cross-domain behaviour). On paid tiers, AI reasons on top of the enriched context. On-demand only, never automated. | Threat model only | Threat model + AI | Threat model + AI | Threat model + AI |
| Scheduled PDF Reports | No | Yes | Yes | Yes |
| DNS Health Monitoring | No | Yes | Yes | Yes |
| SPF Flattener | No | Yes | Yes | Yes |
| Domain Expiry Monitoring Alerts before domains or certs lapse | No | Yes | Yes | Yes |
| DMARC Tasks You Can Act On Prioritised steps to advance each domain | No | Yes | Yes | Yes |
| Brand Protection (TLD Grouping) Alternate TLDs count as one slot | - | - | ✓ | ✓ |
| Lookalike Domain Monitoring | - | Yes | Yes | Yes |
| Dynamic SPF One include, kept inside the 10-lookup limit. Starts when you subscribe, not during the free trial; leave any time and we hand you a record built from your current senders. | No | Yes | Yes | Yes |
| Dedicated Account Manager | - | - | - | ✓ |
| Coming Soon | ||||
| Dark Web Monitoring Credential & domain exposure alerts | No | No | Coming soon | Coming soon |
| Pricing | ||||
| Monthly | Free | £70/mo | £130/mo | Contact us |
| Annual (per month) | Free | £50/mo | £100/mo | Contact us |
The price you see is the price you pay
Most DMARC platforms start cheap, then stop publishing pricing above their first or second tier. The moment your domain count or message volume grows, you are in a sales cycle, a step-function upgrade (commonly 5x to 10x the previous tier), or a vague “contact sales” quote. That is predatory by design: the buyer cannot estimate cost of service upfront, so every conversation starts from the vendor's anchor.
ShieldMarc publishes every tier including the expansion bucket. Need more than 100 domains? The price is £40/month per expansion bucket (50 domain slots each). Posted, predictable, no negotiation needed. No metered overage fees. No surprise invoice the month your volume spikes. If you are consistently over your plan for three months in a row, sales reaches out and you decide the next move together.
Enterprise exists for real enterprise needs, not as a volume trapdoor: formalised SLAs, dedicated regional hardware hosting, or specific compliance frameworks your auditor requires. It is not a surprise you are forced into because you added too many domains: MSP covers up to 100, and expansion buckets take you well beyond that. You can estimate the cost of service with ShieldMarc before picking up the phone. We respect your time and ours; no long-winded negotiation meetings where you are quoted an unreasonable number.
We can hold these prices because we run our own stack. ShieldMarc operates its own database, authentication and monitoring infrastructure rather than renting them from third-party managed platforms, which strips out a layer of vendor fees that legacy tools pass straight through to your bill. Why modern DMARC costs less.
How we compare
ShieldMarc vs the typical DMARC monitoring platform, at each tier. One table, one scan. Competitor figures from each vendor's public pricing page at the time of the most recent review (August 2026).
| Feature | Typical competitor | ShieldMarc |
|---|---|---|
| Free tier | ||
| Domains | 1 | 1 |
| Data retention | 10 days | 1 year |
| AI threat analysis | Paid only | Threat model only (AI on paid plans) |
| Free security tools 4 include plain-English AI explanations | Limited | 20 tools |
| First paid tier biggest savings | ||
| Price e.g. EasyDMARC Plus ~£31/mo annual, dmarcian Basic ~£18/mo | ~£18 to £40/mo | £50/mo (annual, 25 domains) |
| Domains included | 2 | 25 |
| Cost per domain | ~£10 to £20/domain/mo | £2/domain/mo (annual) |
| Monthly message volume Competitor entry tiers are tightly capped | 100,000 | 1,000,000 |
| Analysis engine We run both: our own threat model enriches the context, then AI reasons over it | In-house scoring only | Proprietary threat model + AI |
| SSL monitoring | Typically not included in DMARC tier | All 25 domains |
| DNS, DNSSEC, MTA-STS, TLS-RPT, CAA, lookalike | Partial or add-on per platform | All included on paid tiers |
| Top published tier MSP scale | ||
| Price at 100 domains dmarcian Enterprise (15 domains) is ~£443/mo; EasyDMARC / Valimail are custom quote with no published rate | Custom quote (sales-led) | £100/mo (annual) |
| Monthly message volume dmarcian Enterprise caps at 5M messages on the published tier | Up to 5M (tier-specific) or custom | 5,000,000 (no hard cap) |
| Overage handling | Hit a cap, take the next tier (often a step-function price jump) or sales contact | No hard cap, 3-month grace, no surprise billing |
| Pricing transparency | Published rates end here; everything above is custom quote | Published, including expansion (+50 domain slots for £40/mo) |
| Team members | Per-seat or sales-led | Unlimited |
| Brand TLD grouping | Not advertised | Included |
| Enterprise tier | ||
| What Enterprise means ShieldMarc Enterprise exists for real enterprise requirements, not a volume trapdoor | Triggered by volume caps on the published tier. Used to force bigger deals when you outgrow the listed plan. | Triggered by formal SLA, regional hardware hosting, or specific compliance frameworks. Standard scale stays on published MSP + expansion buckets. |
| Can you estimate your cost upfront? | No. Published pricing stops at the tier above which most growing MSPs land. | Yes, for every standard case. Published MSP + £40/bucket covers any volume or domain count. Enterprise quote is only for SLA/hosting/compliance specifics. |
Competitor figures reflect each platform's own public pricing page at the time of this page's most recent review (August 2026): easydmarc.com/pricing, dmarcian.com/pricing, valimail.com/pricing. Exchange rates are approximate (EUR~£0.86, USD~£0.74). Pricing changes; verify current rates directly with each vendor.
Full side-by-side comparisons: ShieldMarc vs EasyDMARC · vs dmarcian · vs Valimail
Free trial: New accounts start with a 30-day free trial: 10 domains, 1 team member and every monitor type. No credit card required. One trial per organisation.
Money-back guarantee: Whenever you start an annual plan (converting from a free trial, or switching up from monthly), the 30 days run from the date you pay. Cancel within 30 days of that annual payment and we refund it in full, no questions asked.
Annual billing: Pay annually and save up to 29%. Annual plans are billed upfront for the full year.
Data retention: All plans include 1 year of data retention for DMARC reports and changelogs. Uptime check results are kept for 90 days.
Monthly messages (no hard cap, no surprise billing): We do not count messages against your plan, so spoofed mail sent as your domain cannot use up your allowance and you are not penalised for being targeted. If you go over, nothing breaks: reports continue to parse, dashboards stay live, alerts keep firing. We do not charge overage fees. If you are consistently over your plan for three months in a row, a sales contact will reach out to suggest an expansion bucket. Your invoice never changes without a conversation first.
Migrating from NCSC Mail Check: All plans include DMARC aggregate report processing. The Starter plan covers one domain free. Professional covers 25. See our migration guide for step-by-step instructions.
Downgrade: If you downgrade, resources beyond your new plan limits are suspended (not deleted). Upgrade again to restore them.
VAT: ShieldMarc Ltd is not currently registered for VAT, so no VAT is added at checkout: you pay the price shown.
*MSP expansion bucket: MSP includes 100 domain slots and 5 million DMARC messages per month. Need more? Each expansion bucket at £40/month adds another 50 domain slots. All tools, monitors and team seats remain unlimited.
Brand protection (MSP plan): TLD variants of the same brand (e.g. example.com and example.co.uk) count as a single domain slot at no extra cost on the MSP plan. We encourage MSPs to monitor every defensive and alternate TLD for each client. It strengthens their security posture without inflating your bill.
Enterprise: For organisations with custom domain counts, high email volumes, or specific compliance requirements. Enterprise includes a dedicated account manager. Contact us for a tailored quote.
Questions? Open a ticket.