Email Security Guides

Practical guides for setting up, monitoring, and enforcing email authentication. Written for IT admins, security teams, consultants, and MSPs.

Getting Started

Foundational guides for understanding and setting up email authentication. Start here if you are new to DMARC, SPF, or DKIM.

Understand how the three core email authentication protocols work together to protect your domain from spoofing.

Step-by-step guide to publishing your first DMARC record, configuring reporting, and preparing for enforcement.

Once DMARC is published, aggregate reports start arriving. These guides help you understand what they contain and how to act on them.

Learn what DMARC monitoring is, how aggregate reports work, and why monitoring is essential before enforcement.

Understand the XML structure of DMARC aggregate reports, identify legitimate senders, and spot spoofing attempts.

Moving from monitoring to enforcement is the highest-impact and highest-risk step in DMARC deployment. These guides help you do it safely.

Compare quarantine and reject policies, understand the tradeoffs, and learn the safe rollout model for tightening enforcement.

Guides for managed service providers and organizations managing DMARC across many domains.

How to monitor, report, and enforce DMARC across client domains without breaking their mail or burning your team's time.

Related resources

Use our free tools to validate your email authentication records, or start monitoring to see who is sending as your domain.