Email security · DMARC setup
Stop criminals sending email that looks like it came from you
SPF, DKIM and DMARC tell every mail server which email is really from your domain. HeptaShield sets them up, monitors the reports and moves DMARC to enforcement safely, so fake invoices in your name get blocked.
What we set up
Authenticated, monitored, enforced
SPF and DKIM
Every service that sends mail for you, from Microsoft 365 to your invoicing tool, listed and signed.
DMARC to enforcement
We start in monitoring mode, read the reports, then move to quarantine and reject without blocking real mail.
Phishing filtering
Impersonation and look-alike-domain protection for the mail your staff receive.
Ongoing monitoring
New senders and failures are spotted in the reports and fixed before they cause problems.
Questions
Straight answers
- What is DMARC?
- A DNS record that tells receiving mail servers what to do with email that claims to be from your domain but fails SPF and DKIM checks: deliver it, send it to spam, or reject it.
- Do I need DMARC?
- Yes. Google, Yahoo and Microsoft now require it from bulk senders and increasingly check it on all mail, and without it anyone can send mail that appears to come from your domain.
- Will DMARC block our real email?
- Not if it's done in stages. We monitor first, add every legitimate sender, and only then switch to enforcement.
- How do I check my domain?
- Use our free Email Security Check. It reads your SPF, DKIM and DMARC records and grades them in about 10 seconds.
Check your domain, then let us fix it
A free 30-minute review of your email security, with a written assessment and a fix list.
No pressure. If your setup is fine, we'll tell you.