Free tool · Email auth
DMARC walk-through wizard
Tell us your domain and the email providers you use. We look up your current DMARC / SPF / DKIM setup (free) and generate a personalized migration plan with concrete record values, before/after diffs, per-step risk level, recommended timeline.
Current-state lookup is free for everyone. AI-personalized plan generation is included in Starter ($30/mo, 5 playbooks/month) and Pro ($79/mo, 10/month combined remediation + IR runbooks). For a free generic migration recipe instead, see /dmarc-check.
What this is for
Moving DMARC from p=none (observe-only) to p=reject (enforce) is the right destination for every domain that sends email. The path between is conventional but specific to your situation: which providers send mail on your behalf, whether your SPF is hitting the 10-DNS-lookup limit, whether your DKIM coverage is universal, and whether you have a subdomain policy.
This wizard reads your live DNS state, takes your inputs, and generates the actual TXT records you need to deploy along with a week-by-week rollout plan calibrated to your current pass-rate posture.
Privacy
The domain you submit is queried via public DNS only. Plan generation runs against an LLM with your domain's public DNS records as context. No account info, no email content, no private data. Nothing is stored.
After the wizard
Once you've deployed the recommended records, point your DMARC rua= at /dmarc-pdf to validate the daily aggregate reports parse cleanly. Or pick up a Wiredepth subscription to monitor the policy continuously and alert when it regresses. See pricing.