DMARC security · anti-spoofing

See every source sending as your domain.

DMARC aggregate reports arrive as XML built for machines. Sentinely reads them for you and turns the noise into a clear verdict — plus the controls to act on it.

  • 1 DNS record to publish
  • 24/7 spoofing watch
  • EN·IT alerts & digest

Everything that decides if your domain is trusted

  • SPF
  • DKIM
  • DMARC
  • BIMI
  • MTA-STS
  • TLS-RPT
  • DNSBL/RBL
  • rDNS/PTR

Sentinely watches the full stack of signals mailbox providers use to trust — or reject — your mail.

The problem

DMARC holds the evidence — in a format built for machines.

The reports that could tell you who's abusing your domain arrive as raw XML. Almost nobody reads them, so three things quietly go wrong.

Impersonation goes unseen

Anyone can send as your domain. Without DMARC visibility, spoofing and phishing run silent — until a customer or your brand gets burned.

Legit mail gets blocked

A missing SPF include or a broken DKIM key quietly sends your real mail to spam, and the reports that explain why sit unread.

You never reach enforcement

Staying at p=none feels safe, but it leaves the door open. Moving to reject without data is scary — so most domains never do.

What you get

A defense, not a data dump.

Sentinely turns raw reports into decisions: a score to track, a digest to read, and alerts that reach you before anyone else notices.

Domain protection score

A single 0–100 grade (A–F) that rolls SPF, DKIM, DMARC and alignment into one number you can watch over time.

Daily digest + AI Insights

One readable email a day. Claude explains what changed and what to do about it — in English or Italian.

Threat & change alerts

Get told the moment a new source starts spoofing you, authentication drops, or a critical record changes.

DNS & auth hardening

Guided checks for SPF, DKIM, DMARC, BIMI and MTA-STS — with the exact records to publish, copy-ready.

Blocklist & reputation

Continuous RBL/DNSBL, Geo-IP and PTR/rDNS monitoring, so a listing or bad sender never catches you off guard.

Built for many domains

Multi-tenant from day one. Manage dozens of domains and clients from one workspace, cleanly separated.

How it works

One record in. Control out.

No agents, no gateway changes, no mail rerouting. You publish a single DMARC record and Sentinely does the reading.

  1. 01

    Publish your RUA

    Add one DMARC record pointing aggregate reports to Sentinely. That's the only change on your side.

  2. 02

    We ingest & analyse

    We parse every aggregate report, resolve each source, and check authentication, alignment and blocklists — every day.

  3. 03

    Take back control

    Read the verdict, fix what's weak, and move safely from p=none to enforcement (p=reject) with the data to back it.

The daily digest

The one email that reads the reports for you.

Every morning, a digest that summarises what happened and tells you what matters — with AI Insights that explain the why, not just the numbers.

Daily digest · acme.com
Mon, 6 Jul 2026

Protection score

A · 96

▲ +2
98.7%Authenticated
11,854Volume
1New threats

AI Insight

A new source, 193.42.33.8, sent 604 messages as acme.com and failed both SPF and DKIM. It's listed on one blocklist and matches none of your known senders — this looks like spoofing, not lost legitimate mail. No action needed on your side; keeping DMARC at p=reject ensures these are rejected.

Pricing

Start free. Scale by domains, not surprises.

A 14-day free trial on every plan. No card to start.

Starter

€19/mo

For a single domain getting to enforcement.

Start free trial
  • 1 domain
  • Daily DMARC aggregation
  • Protection score (A–F)
  • Email & in-app alerts
  • DNS & auth checks
  • EN/IT daily digest
Most popular

Growth

With AI Insights

€59/mo

For teams protecting a handful of domains.

Start free trial
  • Up to 10 domains
  • Everything in Starter
  • AI Insights by Claude
  • Blocklist & reputation monitoring
  • Threat & change alerts
  • Priority support

Agency

Custom

For MSPs and agencies running many tenants.

Talk to sales
  • Unlimited domains
  • Multi-tenant workspaces
  • White-label (on the roadmap)
  • SSO (on the roadmap)
  • Dedicated support
  • Volume pricing

Prices in EUR, excl. VAT. Introductory pricing — subject to confirmation.

FAQ

Questions, answered.

Do I need to be a DMARC expert?

No. Sentinely translates raw reports into plain-language verdicts and tells you exactly which record to publish. If you can edit a DNS entry, you're set.

Will it change my email or DNS?

No. Sentinely is read-only: we only receive the DMARC reports you route to us. We recommend the records to publish, but you always make the change yourself.

How quickly will I see results?

As soon as your RUA points to us, reports start flowing. Most domains get their first full digest within 24 hours.

Can I manage multiple domains or clients?

Yes. Sentinely is multi-tenant by design — ideal for IT and security teams and for agencies or MSPs running email for many domains.

Where is my data stored, and for how long?

DMARC report data is processed and stored in the EU and retained on a rolling window. See our GDPR/DPA page for the specifics.

Which languages are supported?

The interface, alerts, daily digest and AI Insights are all available in both English and Italian.

See who's sending as your domain.

Start free — publish one DNS record and you'll have your first verdict within a day.