Tools
DMARC record checker
Look up a domain's DMARC policy at _dmarc.<domain>, parse every tag, and surface whether the policy actually enforces (p=quarantine / p=reject) or only monitors (p=none).
What the policies mean
- p=none
- Monitor only. Receivers report on alignment but won’t reject or quarantine anything. Use during ramp-up to surface unauthorised senders.
- p=quarantine
- Receivers should put unauthenticated mail in spam. The right default for most senders — strict enough to deter spoofing, lenient enough that mistakes don’t vanish into the void.
- p=reject
- Receivers must drop unauthenticated mail. The strongest enforcement. Set this only after weeks of clean RUA reports.
DMARC alone is half the story.
SNDR enforces SPF + DKIM + DMARC for every verified sending domain, watches the RUA aggregate reports as they land, and surfaces enforcement gaps in the dashboard before they cost you a reputation.