Pricing
From monitoring to safe enforcement
Start free with DMARC visibility. Upgrade when you need simulation, safe execution, deliverability investigation, or MSSP-scale operations. All paid plans include a 14-day free trial.
Monitor
See who's sending email on your domain — no credit card, no commitment.
- 1 domain
- DMARC aggregate reports in plain English
- SPF & DKIM alignment visibility
- 7-day data retention
- Domain Security Score (preview)
- 1 team member
- Community support
- Sender alerts
- Executive reports
- Dangling DNS detection
- Remediation playbooks
- API access
Protect
For growing businesses that need reliable monitoring, alerts, and compliance-ready reporting.
Billed annually ($230/yr)
Everything in Monitor, plus:
- Up to 5 domains
- 30-day data retention
- Full Domain Security Score with component breakdown
- Dangling DNS detection — subdomain takeover protection
- Manual remediation playbooks — guided step-by-step fixes
- SPF dependency analysis — include chains and removal impact
- Alerts on new senders and authentication failures
- Weekly PDF executive report
- DMARC disposition trends (30-day)
- Peer benchmarks — industry comparison
- DKIM key rotation (2 schedules)
- DANE/DNSSEC monitoring
- Google Postmaster Tools & Microsoft SNDS integration
- Email deliverability correlation dashboard
- Mailbox readiness checks (Google, Microsoft, Yahoo)
- Deliverability investigation — root-cause analysis
- Time-to-enforcement tracker
- DKIM key strength auditing
- Branded weekly digest email
- 5 AI executive summaries/mo
- 3 team members
- Priority email support
- Enforcement center & sender inventory
- Third-party risk monitoring
- Auto-remediation
- API access
Enforce
For IT and security teams who need enforcement simulation, auto-remediation, and threat intelligence.
Billed annually ($624/yr)
Everything in Protect, plus:
- Up to 10 domains
- 90-day data retention
- Enforcement center — guided none→quarantine→reject with safety gates
- Sender inventory — classify, authorize, and govern every sender
- Impact simulation — blast-radius analysis before enforcement changes
- Rollback safety net — automatic DNS rollback
- Auto-remediation with regression detection
- Fix Wizard — guided remediation with DNS preview
- Third-party risk monitoring — scan vendor email security posture
- Inbound DMARC — scan up to 25 vendor domains
- Supply chain sender risk — IP reputation (15 DNSBLs) + DKIM key strength
- DKIM key rotation (10 schedules)
- BIMI readiness indicator
- Threat intelligence — IP reputation enrichment (AbuseIPDB, Spamhaus, Google Safe Browsing)
- Certificate Transparency monitoring — detect phishing certs
- Takedown orchestration — Google Web Risk, Netcraft, URLhaus + abuse contacts
- Domain Security Score forecasting (30/60/90-day projections)
- Sender behavioral profiling — cadence fingerprinting and anomaly detection
- 25 AI executive summaries/mo
- Full API access & webhooks
- 10 team members
- Priority support
Enterprise
Unlimited scale, white-label branding, and enterprise controls for MSSPs and large organizations.
Everything in Enforce, plus:
- Unlimited domains
- 365-day data retention
- Automation hardening — precondition checks, regression detection, auto-pause
- Auto-remediation with approval workflows and policy controls
- Sender Surface — unified brand exposure view with Brand Risk Score
- MSSP multi-tenant portal with white-label branding
- MSSP remediation queue — cross-customer blockers, approvals, failed changes
- MSSP vendor portfolio — shared vendor risk across managed customers
- PSA/RMM integration (ConnectWise, Autotask, HaloPSA)
- Inbound DMARC — unlimited vendor domain scanning
- Compliance reports — 11 frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS v4.0, GDPR, NIST CSF, NIS2, NCSC CAF, ASD Essential Eight, CISA BOD 18-01, FedRAMP)
- HIPAA compliance pack + BAA availability
- STIX/TAXII 2.1 threat feed — export to Splunk, Sentinel, Elastic, or any SIEM
- Enterprise SSO (OIDC / SAML) with SCIM 2.0 provisioning
- Unlimited DKIM key rotation schedules
- Unlimited AI executive summaries
- Unlimited team members with role-based access
- Dedicated onboarding
- Documented support commitments (see /support-policy)
- Security review support for SOC 2, ISO 27001, and auditors
What's email spoofing costing you?
Calculate your estimated risk exposure and see the ROI of email authentication.
Email Security ROI Calculator
Estimate your financial exposure to email spoofing and business email compromise
Annual BEC Risk Exposure
$25K – $46K
Spoofing Probability
20.0% – 36.0%
Expected Annual Loss
$5K – $17K
SpoofSentry Annual Cost
$228
Estimated Net Savings
$5K – $16K
ROI
1000% – >1,000%
Payback Period
<1 month – 0.5 months
Potential Insurance Savings
$500 – $2K
Illustrative estimate based on public breach-loss studies and your selected inputs. Actual results may vary.
Need it done for you?
Our experts can handle your DMARC implementation from start to finish.
DMARC Setup & Verification
One-timeComplete DNS configuration, SPF/DKIM/DMARC alignment, and verification for all your domains.
Get a quote →Enforcement Rollout
One-timeGuided migration from p=none to p=reject with monitoring, stakeholder communication, and risk mitigation.
Get a quote →Managed Monitoring
MonthlyProactive alert response, weekly executive reports, and ongoing optimization recommendations.
Get a quote →Incident Response
On-demandSpoofing incident triage, forensic analysis, evidence pack preparation, and remediation guidance.
Get a quote →Partner Program
Built for MSPs, MSSPs, and IT consultancies
Manage email security across all your clients from a single white-label portal. Pooled billing, portfolio analytics, cross-tenant remediation, and PSA integrations (ConnectWise, Autotask, HaloPSA, ServiceNow) included.
Partner Starter
Up to 10 customers
Volume discount
Partner Growth
Up to 50 customers
Tiered pricing
Partner Enterprise
50+ customers
Custom
- White-label partner portal
- Per-customer billing with your margin
- Portfolio-wide security posture dashboard
- Customer impersonation with audit trail
- Cross-tenant remediation queue
- Bulk domain import and policy templates
- PSA ticket sync (ConnectWise, Autotask, HaloPSA)
- Dedicated partner success manager
How SpoofSentry compares
See how we stack up against alternatives.