Find out before your client does
WatchDMARC watches the SPF, DKIM and DMARC records on every domain your clients send from, reads the reports mailbox providers send back, and tells you in plain English when something breaks.
The three things it watches
SPF
Which servers are allowed to send as you. It breaks quietly when a provider changes, and it silently stops working past ten DNS lookups.
DKIM
The signature that proves a message really came from you. A rotated or removed key takes the proof with it and nothing tells you.
DMARC
The policy that says what to do with mail that fails, and the reports that say who is sending as you. Most domains publish it and never read it.
Why this matters more than it used to
HighLevel now pauses sending after repeated blocks from receiving providers, and can suspend a client's email outright if it keeps happening. Those blocks do not arrive without warning: authentication drifts first, and the aggregate reports show it. WatchDMARC is built to catch that drift while it is still a DNS fix.
Google and Yahoo have also required DMARC on bulk senders since 2024. If you send on behalf of clients at any volume, a missing or unenforced policy is no longer a best practice question, it is a delivery question.
Pricing
| Plan | Price | Domains |
|---|---|---|
| Starter | $47 per month | 5 |
| Agency | $97 per month | 50 |
| Extra domains | $50 per month | 25 more, above 50 |
Full pricing and what is included
Common questions
What is DMARC, in one sentence?
DMARC is a DNS record that tells receiving mail servers what to do with email that claims to be from your domain but cannot prove it.
Do I need to change how I send email?
No. WatchDMARC only reads DNS records and the reports mailbox providers already send. Nothing routes through us and we never see your mail.
What do I have to add?
One tag on your DMARC record, called rua, pointing reports at us. We show you the exact record to paste and then verify it resolves.
How fast will I see something?
The record check is instant. Aggregate reports arrive on the cadence mailbox providers send them, which is usually every 24 hours, so the first report data appears within a day or two.
Will this stop my email going to spam?
It will tell you when the authentication that spam filters rely on is broken or drifting. That is a cause of spam placement, not the only one, and we do not claim to fix placement on its own.
What happens if I cancel?
Monitoring stops, alerts stop, and your stored report data is deleted within 30 days. Your own DNS records are yours and are left exactly as they are.