MANAGED DMARC · EMAIL SECURITY
Protect the domain behind your business email.
Fraudulent email can use your domain without passing through your mail server. Our managed DMARC service helps identify the systems sending on your behalf and builds towards stronger protection against direct domain spoofing.
Monitoring, reporting and gradual policy hardening, with your legitimate email services considered first.
MORE THAN A DNS RECORD
Understand who is sending before tightening the policy.
What DMARC does
DMARC works with SPF and DKIM to check whether a message is authenticated and aligned with the domain in its visible From address. A published policy tells receiving servers how you want messages that fail those checks to be handled.
Why monitoring comes first
Your mail server may not be your only sender. Website forms, accounting software, newsletters and CRM systems may also use your domain. Tightening the policy before identifying these services can disrupt legitimate email.
A monitoring-only policy, p=none, does not request quarantine or rejection. Reports help establish which sources need attention before stronger enforcement is introduced.
MANAGED SERVICE PRICING
Initial review, followed by ongoing oversight.
Monitoring and implementation
R600
Per domain, per month
For the first six months
DMARC activity monitoring, analysis of sending sources and weekly reports. We assist with necessary SPF changes as legitimate services are identified and work towards stronger DMARC enforcement where appropriate.
Ongoing monitoring
R100
Per domain, per month
After the initial six months
Continued monitoring and a monthly DMARC report. This provides visibility as your sending systems change and helps identify issues that need review.
* All pricing excludes VAT and is valid for 2026. Fees are charged per domain.
Basic setup for Rhino Hosting clients: an initial DMARC record can be implemented at no additional charge as part of hosting. This is distinct from the managed monitoring service above.
A GRADUAL APPROACH
Build a reliable picture of your email activity.
Identify legitimate senders
We review DMARC reports alongside information about the services your business uses. Your input helps distinguish approved mail sources from traffic that should not be using your domain.
Review authentication
We analyse the reporting data and assist with necessary SPF changes. Authentication issues are considered before policy changes so that legitimate sending services are not overlooked.
Strengthen the policy carefully
Once the legitimate sending sources are understood, we can progressively move towards quarantine or reject where appropriate. The policy decision is based on the findings, not a promise to enforce on a fixed date.
Keep reviewing changes
New websites, accounting tools and marketing platforms can introduce new mail sources. Ongoing monitoring and reports help keep those changes visible rather than treating DMARC as a once-off task.
An important layer, not a complete security guarantee.
DMARC addresses unauthorised use of your domain in email. It does not prevent every phishing attempt, stop somebody using a lookalike domain or prove that the contents of a message are trustworthy.
It also does not replace mailbox security, multi-factor authentication or independent verification of payment-detail changes. Receiving servers apply their own handling policies, so DMARC is not a guarantee of inbox delivery.
For the technical scope, see the DMARC FAQ.
Read more about the problem and the service.
Why a DNS record is only the starting point.
Our Rhino Hosting article explains the difference between a basic record, ongoing monitoring and stronger enforcement.
When email impersonates a business.
A practical account of invoice fraud and why the visible sender address alone is not enough to establish trust.
Let us review what your domain needs.
Tell us which domain you want to protect and which services send email for your business. We can discuss basic setup or the managed monitoring service and agree the next step.