# EasyDMARC

> EasyDMARC is an email authentication platform that collects the DMARC aggregate and failure reports your domains already generate, translates the raw XML into plain-language dashboards showing which senders are passing SPF and DKIM alignment, and walks you through tightening your policy from p=none to p=reject; it also publishes SPF, DKIM, BIMI, and MTA-STS tooling, and it does not warm mailboxes or send email.

- Category: Email Deliverability & Warming (https://saastracker.org/categories/email-deliverability)
- Website: https://easydmarc.com
- Starting price: $0 (Free, one domain), then $35.99 per month billed annually (Plus)
- Free plan: One domain, 1,000 DMARC-reported emails a month, fourteen days of data history, one user, basic reports and the full set of SPF, DKIM, DMARC, and BIMI lookup tools.
- Free trial: No separate trial; the free plan is the evaluation path
- Founded: 2018, HQ: United States, with engineering roots in Yerevan, Armenia, Ownership: Venture-backed
- Profile last reviewed: 2026-08-22
- Canonical profile: https://saastracker.org/products/easydmarc

## Overview

EasyDMARC belongs to the third job in the deliverability category: SPF, DKIM, and DMARC authentication monitoring. It is not a warming tool and it is not a placement tester. Its entire function is to answer one question with evidence: who is sending email as your domain, and does that mail authenticate correctly. Every receiving mail server that gets a message claiming to be from your domain already produces a DMARC aggregate report if you ask for one. EasyDMARC gives you an address to point your DMARC record at, ingests those XML reports, and renders them as something a small business owner can read.

This became a real purchase rather than a nice-to-have in 2024, when Google and Yahoo made DMARC mandatory for bulk senders. A large number of small companies discovered that they had never published a DMARC record at all, or had published p=none years ago and left it there, which satisfies the letter of the requirement while providing no protection and no visibility. EasyDMARC's positioning is that the reporting layer should be legible enough that a generalist can run it, and its product decisions follow from that: named vendor identification instead of raw IP addresses, a guided policy ladder, and an SPF flattening tool called EasySPF for the very common problem of blowing past the ten DNS lookup limit.

The commercial shape is friendly to small teams and gets expensive fast if you own a lot of domains. The free plan covers one domain and 1,000 emails a month with fourteen days of history, which is genuinely enough to see what is going on and publish a first record. Plus at $35.99 a month billed annually covers two domains and starts at 100,000 emails a month with three months of history, and Premium at $71.99 a month covers four domains with a year of history and TLS reporting. Domain count, not feature access, is what pushes buyers upward, and adding domains beyond a tier's allowance is a conversation with sales rather than a published line item, which is the one place the pricing stops being self-serve.

The company raised a $20M Series A from Radian Capital in 2024 and has been pushing toward managed services and MSP tooling, which is the natural end state for a category where the buyer often does not want to learn the subject at all. For a small business, the honest read is that EasyDMARC is one of the two or three easiest ways to get from no DMARC to an enforced policy without hiring a consultant, and that the free tier is a legitimate starting point rather than a demo.

## How it works

1. You add a domain and EasyDMARC gives you a DMARC record to publish in DNS, with its own reporting address in the rua tag (and optionally ruf for failure reports). Nothing changes about how your mail is sent; you are only asking receivers to start reporting.

2. Within a day or two, aggregate reports start arriving from Google, Microsoft, Yahoo, and every other receiver that supports DMARC. EasyDMARC parses them and shows sending sources by name where it can identify the vendor, so instead of an unfamiliar IP block you see that the mail came from your CRM, your invoicing tool, or an unauthorized sender.

3. You then fix alignment source by source: authorize the legitimate senders in SPF, set up DKIM signing with each vendor, and confirm the pass rate climbing in the dashboard. EasySPF handles the case where your SPF record has exceeded the ten DNS lookup limit, which silently breaks SPF for everyone.

4. Once your legitimate mail is authenticating consistently, you move the policy up the ladder: p=none for observation, then p=quarantine with a percentage rollout, then p=reject. EasyDMARC's alerting flags regressions so a newly added vendor that nobody told you about does not sit failing for a month.

## Best for

Small businesses and MSPs that need to satisfy the Google and Yahoo bulk sender requirements, see who is sending as their domain, and get to an enforced p=reject policy without hiring a deliverability consultant, especially those managing one to four domains.

## Not the right fit for

- Anyone whose actual problem is cold email landing in spam; DMARC monitoring proves your mail is authenticated, and authenticated spam still goes to the junk folder. You want a warming tool or a placement tester instead.
- Teams looking for inbox placement evidence; EasyDMARC never tells you whether a message landed in the inbox, promotions, or spam, because aggregate reports do not carry that information.
- Organizations with dozens of domains on a budget; the tiers cover one, two, and four domains respectively, and expanding beyond that means talking to sales rather than clicking upgrade.
- Buyers who need SSO, audit logs, or API access; all three sit on the sales-quoted Enterprise plan, so the self-serve tiers are effectively single-organization tools.
- Companies that want the work done for them rather than explained to them; the guided flows still assume someone will go configure DKIM in each vendor's admin panel.

## Features

### DMARC reporting and analysis

The core job: turning aggregate XML into a picture of who sends as you.

- **Aggregate report parsing**: Ingests the rua reports receivers already generate and renders pass and fail rates by sending source, volume, and time, replacing raw XML nobody reads.
- **Failure and forensic reports**: Available from the Plus tier, showing individual failing messages where receivers send them, which is how you catch a specific misconfigured vendor rather than a statistical trend.
- **Email vendor identification**: Maps sending IP ranges to named services so a source reads as your marketing platform or your helpdesk rather than an unlabelled address block. This is the single feature that makes reports usable by a non-expert.
- **Alignment diagnosis**: Separates SPF alignment from DKIM alignment per source, since a message can pass SPF authentication and still fail DMARC because the envelope domain does not match the visible From domain.
- **Threat and spoofing view**: Highlights sources that are neither authorized nor authenticated, which is the evidence a buyer needs to justify moving to an enforcement policy.
- **Data history by tier**: Fourteen days on Free, three months on Plus, one year on Premium, and three years on Enterprise. History matters because monthly sending patterns hide from a two-week window.

### Record management and hosted tooling

The DNS side, including the SPF lookup limit problem that breaks most small domains.

- **EasySPF**: Addresses SPF records that exceed the ten DNS lookup limit, a silent failure mode where SPF stops evaluating and every recipient sees a permerror. Included from the Plus tier.
- **DKIM setup guidance**: Per-vendor instructions for generating and publishing DKIM keys, since DKIM is the alignment path that survives forwarding and SPF is the one that does not.
- **BIMI tooling**: BIMI record generation and inspection are available even on the free tier, so you can prepare the logo record once DMARC enforcement is in place. Note that BIMI at most providers also requires a Verified Mark Certificate purchased separately.
- **MTA-STS and TLS reporting**: TLS reports arrive on the Premium tier; fully managed MTA-STS hosting is an Enterprise feature rather than a self-serve one.
- **Free diagnostic tools**: Public SPF, DKIM, DMARC, and BIMI lookup and generator tools, plus a domain scanner, usable without an account and commonly the first contact a buyer has with the product.
- **Managed record hosting**: Managed DMARC, DKIM, BIMI, and MTA-STS records sit on the Enterprise plan, so self-serve customers publish and maintain their own DNS entries.

### Getting to enforcement

The guided path from p=none to p=reject, which is the outcome buyers are paying for.

- **Policy ladder guidance**: Walks through none, then quarantine with percentage rollout, then reject, with the pass-rate evidence needed to decide when each step is safe.
- **Alert management**: Configurable alerts on pass-rate drops, new sending sources, and record changes, so a regression after someone adds a new SaaS tool surfaces in days rather than quarters.
- **Subdomain handling**: Tracks subdomain sending separately, which matters because a permissive subdomain policy undermines an enforced organizational one.
- **Compliance reporting**: Exportable views of authentication posture, useful for demonstrating conformance with the Google and Yahoo bulk sender requirements or a customer security questionnaire.

### Accounts, scale, and platform

Where domain counts and user counts start driving the bill.

- **Domain allowances**: One domain on Free, two on Plus, four on Premium, unlimited on Enterprise. Additional domains beyond a tier are quoted by sales rather than priced publicly.
- **Email volume ceilings**: 1,000 emails a month on Free; Plus and Premium start at 100,000 a month with Premium scaling to around five million. Volume here means DMARC-reported messages, not messages you send from your laptop.
- **User seats**: Free and Plus are single-user; Premium and Enterprise allow unlimited users, which is the practical dividing line for an agency or an internal IT and marketing split.
- **MSP and partner program**: A dedicated managed service provider path for agencies running authentication across a client book, with multi-tenant handling rather than one login per client.
- **SIEM integrations**: Premium adds SIEM export so authentication events can land in a security tool alongside other logs.
- **API and SSO**: Both are Enterprise-only, which is worth knowing before you plan an automation around the self-serve tiers.

## Use cases

- **Small business that just got a Gmail bulk sender warning**: The marketing platform started flagging that the sending domain has no DMARC record, and nobody in the company knows what SPF alignment means. Outcome: The free tier publishes a p=none record, reports arrive within days, vendor identification names the four services actually sending, and within a few weeks the domain is authenticating cleanly and moving to quarantine.
- **Ops lead who inherited a domain with a broken SPF record**: SPF has accumulated a dozen include statements over the years and has quietly exceeded the ten DNS lookup limit, so SPF now fails for everyone with no visible symptom. Outcome: EasySPF resolves the lookup overflow, the aggregate reports show pass rates recovering across all sources, and the alerting catches the next vendor someone adds without telling IT.
- **MSP running authentication for a client book**: Twenty small clients each need a DMARC posture, and doing it in twenty separate free accounts is unmanageable. Outcome: The MSP program gives multi-tenant handling and a single console, turning DMARC deployment into a repeatable service line rather than a favor done at cost.
- **Founder preparing for a security questionnaire**: An enterprise prospect's vendor review asks whether the company enforces DMARC, and the honest answer is currently no. Outcome: A guided move to p=reject over six weeks, with exportable evidence of the enforced policy and the pass-rate history behind it.

## Pricing

Freemium subscription tiered by number of domains, monthly DMARC-reported email volume, and data history length, with the top tier quoted by sales.

- **Free**: $0 per month. 1 domain; 1,000 emails per month; 14 days of data history; 1 user; SPF, DKIM, DMARC, and BIMI tools plus knowledge base. Enough to publish a first record and see who is sending as you. The fourteen-day history is the binding limit.
- **Plus**: $35.99 per month billed annually ($44.99 monthly). 2 domains; From 100,000 emails per month; 3 months of data history; Aggregate and failure reports; Email vendor identification, alert management, and EasySPF. Single-user. The tier most small businesses with one main domain and a marketing subdomain will land on.
- **Premium**: $71.99 per month billed annually ($89.99 monthly). 4 domains; Up to around 5,000,000 emails per month; 1 year of data history; Unlimited users; TLS reports and SIEM integrations. Unlimited users is the real upgrade trigger as often as the domain count is.
- **Enterprise**: Custom quoted. Unlimited domains and volume; 3 years of data history; Managed DMARC, DKIM, BIMI, and MTA-STS; Dedicated DMARC engineer; SSO, audit logs, and API access. The only tier with API and SSO, and the only sales-gated one.

Billing notes:

- Annual billing is roughly a twenty percent discount against the monthly rate on both paid self-serve tiers.
- Additional domains beyond a tier's allowance are not published as a per-domain price; the vendor directs you to sales, which is the least self-serve part of an otherwise self-serve product.
- Email volume counts DMARC-reported messages seen by receivers, not messages you consciously send, so a domain used by several SaaS vendors generates more volume than owners expect.
- History length is a real cost lever rather than a cosmetic one: diagnosing a monthly billing run or a quarterly newsletter is impossible on a fourteen-day window.
- API access sitting behind Enterprise means self-serve customers cannot automate reporting into their own systems at any published price.

Value assessment: For one to four domains, EasyDMARC is priced sensibly against the alternative of paying a deliverability consultant a few thousand dollars to do the same deployment once and leave no monitoring behind. Plus at $35.99 buys the two features that decide whether a generalist succeeds here, vendor identification and EasySPF, and Premium's unlimited users is worth the step up for any team where marketing and IT both need to look. The value falls off sharply above four domains, where DMARCLY and URIports offer far more domains for less money, and it falls off again if you need an API. Judged as a guided path to p=reject for a small business, it is good value; judged per domain at scale, it is expensive.

## Strengths

- Vendor identification turns aggregate reports from an IP address puzzle into a readable list of the services sending as your domain, which is the difference between a tool a generalist can use and one they abandon.
- EasySPF solves the ten DNS lookup overflow, an extremely common silent failure that most small domains have and nobody notices.
- The free tier is a real product rather than a teaser: one domain, working reports, and the full record tooling is enough to get a first DMARC policy published.
- Clear guided path from p=none through quarantine to reject, with the pass-rate evidence needed to know when each step is safe.
- Unlimited users on Premium, which many competitors reserve for far more expensive tiers.
- Well funded after a $20M Series A from Radian Capital in 2024, with an active MSP and partner program that suggests the reporting product will keep getting maintained.

## Limitations

- Domain allowances are stingy relative to price: four domains on a $71.99 plan compares poorly with DMARCLY's fifteen at $69 or URIports' twenty-five at $30.
- Additional domains have no published price, which breaks the self-serve promise exactly at the moment a growing buyer needs it.
- API access and SSO are Enterprise-only, so there is no supported way to automate at a published price.
- Managed DMARC, BIMI, and MTA-STS record hosting is Enterprise-only; self-serve customers maintain their own DNS.
- Does nothing about inbox placement. A domain can be at p=reject with perfect alignment and still have every cold email land in spam, and buyers regularly confuse the two problems.
- No warming capability of any kind, so a new sending domain still needs a separate tool before it can carry volume.

## Comparisons

- **EasyDMARC vs PowerDMARC**: Both are self-serve DMARC platforms aimed at non-experts, and PowerDMARC's Basic plan is dramatically cheaper at roughly $12 to $15 a month for five domains against EasyDMARC's two domains at $35.99. EasyDMARC's reporting interface and vendor naming are the more polished, and its free tier is more useful for a first deployment. Take PowerDMARC if you own several domains and price is the deciding factor; take EasyDMARC if one person with no DMARC background has to run this alone.
- **EasyDMARC vs dmarcian**: dmarcian was founded by the primary author of the DMARC specification and is the more authoritative, more consultative product, with a $24 Basic plan for two domains that undercuts EasyDMARC's entry price. EasyDMARC is the friendlier interface and includes SPF flattening lower down the range. Choose dmarcian if you want depth and are willing to learn the subject; choose EasyDMARC if you want the shortest path to an enforced policy.
- **EasyDMARC vs DMARCLY**: DMARCLY is the value play: $69 a month covers fifteen domains against EasyDMARC's four at $71.99, and Safe SPF handles the lookup limit the way EasySPF does. EasyDMARC has better vendor identification, a stronger free tier, and a more developed MSP program. Any buyer with more than four domains should price DMARCLY first.
- **EasyDMARC vs URIports**: URIports is the cheapest serious option in this group at $6 a month for five domains and $30 for twenty-five, and it monitors browser-side CSP and certificate health alongside DMARC. EasyDMARC is far more hand-holding for someone who does not know what DKIM alignment is. Technical operators should take URIports; non-technical owners should take EasyDMARC and pay the difference for guidance.
- **EasyDMARC vs MailGenius**: These solve different problems and are frequently confused. MailGenius runs spam and content tests on individual messages to tell you whether a send looks likely to be filtered. EasyDMARC monitors authentication across your whole domain and never comments on placement. If your mail is landing in spam despite passing authentication, MailGenius is the tool; if you do not know who sends as your domain, EasyDMARC is.
- **EasyDMARC vs Red Sift OnDMARC**: Red Sift OnDMARC's Express tier covers four domains for $9 a month with hosted SPF, DKIM, DMARC, MTA-STS, and BIMI services, against EasyDMARC's four domains at $71.99 with managed records reserved for Enterprise. EasyDMARC gives a year of history where Express gives thirty days, and has a stronger MSP programme. Take OnDMARC Express on price and hosted records; take EasyDMARC if report history or agency multi-tenancy matters more.

## Implementation

- Setup time: Under an hour to publish a record and start collecting, then two to eight weeks of real elapsed time before you have enough data to move to enforcement safely. The clock, not the configuration, is the constraint.
- Learning curve: Moderate, and lower than the category average. You still have to understand the difference between SPF authentication and SPF alignment to make good decisions, but vendor identification removes most of the interpretive work that stalls first-time deployments.
- Onboarding: Fully self-serve through Premium. A dedicated customer success manager comes with annual Premium, and a dedicated DMARC engineer is an Enterprise inclusion. The knowledge base is thorough and public.
- Migration: Moving from another DMARC platform means changing the rua address in your DNS record, after which history starts fresh; report history does not transfer between vendors. Run both in parallel for a few weeks by listing two rua addresses if continuity matters. Nothing about your mail flow changes during migration.

## Platform, API & security

- Platforms: Web application, Public DNS lookup and record generator tools, MSP multi-tenant console
- API: API access is available on the Enterprise plan only; the self-serve tiers have no published programmatic access. SIEM integrations arrive on Premium.
- Compliance: SOC 2, GDPR, ISO 27001
- Data residency: Not published as a customer-selectable option on self-serve tiers.
- SSO: Single sign-on is an Enterprise feature.
- Security notes: The platform processes DMARC aggregate reports, which contain sending IP addresses and authentication results rather than message bodies. Failure reports can contain message headers and, depending on the reporting receiver, partial content, so failure reporting deserves a moment of thought before being enabled on a sensitive domain.

## Support

- Channels: Email support on paid plans, Customer success manager on annual Premium, Dedicated DMARC engineer on Enterprise
- Documentation: Extensive public knowledge base and blog covering SPF, DKIM, DMARC, BIMI, and MTA-STS, plus free public diagnostic tools that double as documentation.
- Community: No large official user forum; the free tools and blog carry most of the community-facing presence.

## Company

- Founded: 2018
- Founders: Gerasim Hovhannisyan, Avag Arakelyan
- Headquarters: United States, with engineering roots in Yerevan, Armenia
- Ownership: Venture-backed
- Employees: Not disclosed
- Funding: Raised a $20M Series A led by Radian Capital in 2024, following earlier seed funding.

Funding history:

- Seed (2022): Not fully disclosed. Early institutional backing ahead of the Series A.
- Series A (2024): $20M. Led by Radian Capital, funding expansion of the platform and MSP channel.

Timeline:

- 2018: Founded by Gerasim Hovhannisyan and Avag Arakelyan with the premise that DMARC reporting should be readable by people who are not email engineers.
- 2021: Free public SPF, DKIM, DMARC, and BIMI diagnostic tools become a significant acquisition channel, drawing in domain owners with no prior authentication knowledge.
- 2022: Raises seed funding and expands the platform with EasySPF to address the ten DNS lookup limit that silently breaks SPF on long-lived domains.
- 2024: The Google and Yahoo bulk sender requirements make DMARC mandatory for high-volume senders, turning authentication monitoring from an IT hobby into a small business purchase.
- 2024: Raises a $20M Series A led by Radian Capital and builds out the MSP and partner program for agencies managing authentication across client books.

## Integrations

DNS providers via published record changes (no direct write access required), Google Workspace as a sending source, Microsoft 365 as a sending source, SIEM platforms on the Premium tier, Marketing and transactional email vendors, identified by name in reports, MSP multi-tenant console for agency use, API access on the Enterprise plan

## FAQ

### What is EasyDMARC?

EasyDMARC is an email authentication monitoring platform. It collects the DMARC aggregate reports that receiving mail servers already generate about your domain, turns the raw XML into readable dashboards showing which senders pass SPF and DKIM alignment, and guides you through tightening your DMARC policy from p=none to p=reject. It also provides SPF, DKIM, BIMI, and MTA-STS tooling.

### Which of the three deliverability jobs does EasyDMARC do?

Authentication monitoring only. It does not warm mailboxes and it does not run inbox placement tests. Buyers routinely purchase a DMARC tool hoping to fix cold email landing in spam, which it cannot do; authenticated mail can still be filtered on reputation and content grounds.

### How much does EasyDMARC cost?

The free plan covers one domain, 1,000 reported emails a month, and fourteen days of history. Plus is $35.99 a month billed annually for two domains, 100,000 emails a month, three months of history, and a single user. Premium is $71.99 a month billed annually for four domains, a year of history, TLS reports, and unlimited users. Enterprise is quoted by sales and is the only tier with API access and SSO.

### How many domains does each plan cover and what does an extra domain cost?

One domain on Free, two on Plus, four on Premium, and unlimited on Enterprise. Additional domains beyond a tier's allowance are not published as a per-domain price; EasyDMARC directs you to sales for a quote. If you own more than four domains, DMARCLY at fifteen domains for $69 or URIports at twenty-five for $30 will usually cost less.

### How does EasyDMARC get me to p=reject?

You start at p=none so receivers report without acting. As reports arrive, you authorize each legitimate sender in SPF and set up DKIM signing with each vendor, watching the alignment pass rate climb. When legitimate mail is authenticating consistently, you move to p=quarantine, often with a percentage rollout, then to p=reject. The realistic timeline for a small business with a handful of sending vendors is four to eight weeks, limited by how long it takes to see a full sending cycle rather than by the tool.

### Does EasyDMARC support hosted SPF, DKIM, and BIMI records?

Partly, and the split matters. BIMI record generation and inspection are available even on the free tier, and EasySPF addresses SPF lookup overflow from the Plus tier. Fully managed hosting of DMARC, DKIM, BIMI, and MTA-STS records is an Enterprise feature, so self-serve customers publish and maintain their own DNS entries. BIMI display at most mailbox providers also requires a Verified Mark Certificate bought separately from a certificate authority.

### What are aggregate and failure reports, and how does EasyDMARC present them?

Aggregate reports are daily XML summaries from receiving servers listing sending IPs, message counts, and SPF and DKIM results. Failure reports are per-message reports on individual failures, available from the Plus tier. EasyDMARC presents aggregates as named sending sources with pass and fail rates rather than IP addresses, which is what makes them usable without email engineering knowledge. Failure reports can include headers and sometimes partial content, so enable them deliberately on sensitive domains.

### What is the email volume limit actually counting?

It counts DMARC-reported messages seen by receiving servers claiming to be from your domain, not messages you personally send. That includes mail from every SaaS vendor sending on your behalf and, importantly, spoofed mail sent by other people. A domain being actively impersonated can consume volume faster than its owner expects.

### Do I still need a warming tool or a placement tester if I use EasyDMARC?

If you send cold outbound or run a new domain, yes. Authentication is a prerequisite for good placement, not a substitute for it. A typical outbound stack is EasyDMARC or a peer for authentication, a warming service such as MailReach or InboxDoctor for new mailboxes, and a placement tester such as GlockApps or Unspam for evidence of where mail lands.

### Who owns EasyDMARC?

EasyDMARC is a venture-backed company founded in 2018 by Gerasim Hovhannisyan and Avag Arakelyan, with engineering roots in Armenia. It raised a $20M Series A led by Radian Capital in 2024.

## Editorial verdict

EasyDMARC is the DMARC platform to pick when the person running it does not want to become an email authentication expert. Vendor identification and EasySPF remove the two obstacles that most often stall a first deployment, the free tier is genuinely enough to publish a policy and start collecting evidence, and the guided ladder to p=reject is honest about how long it takes. The pricing is where it stops being obviously correct: four domains for $71.99 is poor value beside DMARCLY or URIports, extra domains have no published price, and API access is locked behind a sales conversation. Buy it for one to four domains and a non-specialist owner. Do not buy it expecting help with inbox placement or cold email reputation, because it does neither.

---

Source: SaaSTracker (https://saastracker.org), an independent editorial project. This profile is compiled from public information, carries no peer reviews or paid placement, and was last reviewed 2026-08-22. Awards are judged on published criteria: https://saastracker.org/methodology