In this guide · 8 sections
Short answer
A small business with one domain can often manage on a free tool: Postmark's weekly DMARC digest, or Cloudflare DMARC Management if your DNS is on Cloudflare. Pay (roughly US$14 to US$45 a month, as of October 2026) when you have several sending services, several domains or want help reaching p=reject.
What DMARC aggregate reports contain
Your DMARC record's rua tag tells receiving mail servers, such as Gmail and Outlook.com, where to send aggregate reports about email that claimed to come from your domain. Google's Set up DMARC help page explains that these reports help you find authentication problems and malicious activity. Each report is an XML file, usually zipped, covering about a day.
- Who reported: the receiving organisation, such as Google or Microsoft, and the date range.
- Your published policy: the DMARC record they saw (p=none, quarantine or reject).
- Each sending source: an IP address and the number of messages it sent using your domain.
- Results: whether SPF and DKIM passed, and whether they aligned with your From domain.
- Disposition: what the receiver did: delivered, quarantined or rejected.
Aggregate reports contain no email content. Failure (forensic) reports, requested with the ruf tag, can include message details, and few large providers send them. The updated standard, published as RFC 9989 to RFC 9991 on 20 May 2026, adds much more guidance about personal data risks in reporting.
Free vs paid DMARC report tools at a glance
All of these tools do the same core job: collect reports at an address they give you, parse them, and show each sending source with pass or fail. The differences are in naming sources, alerts, history, number of domains and support.
Free email digest
Easiest startFree
- Postmark: weekly summary by email
- No dashboard or history in the free version
- Setup is one DNS change
- Good enough to spot new senders
Best for: One domain, owner checks email weekly.
Free dashboard
Free
- Cloudflare DMARC Management, if DNS is on Cloudflare
- Names sending services and shows SPF, DKIM and DMARC status
- Includes an SPF lookup audit
- Open-source parsers are free but need hosting
Best for: Domains already on Cloudflare, or teams with a server.
Paid service
From about US$14/month
- Named sources and alerts
- Longer history and several domains
- Guided path to p=reject
- Support from the vendor
Best for: Several sending tools, domains or staff involved.
Free DMARC report tools in detail
Postmark DMARC monitoring. Postmark's free DMARC tool processes reports from major mailbox providers and emails you a human-readable weekly summary. You add the rua address it gives you to your DMARC record. Postmark labels the free version 'great for monitoring personal domains', which is honest: it shows sources and pass rates, but there is no dashboard.
Cloudflare DMARC Management. Cloudflare announced general availability on 16 June 2026, free for every Cloudflare customer. Its documentation lists it as available on all plans. It shows each sending source and IP with SPF, DKIM and DMARC alignment, a status view of your DMARC, DKIM, SPF and BIMI records, and an SPF lookup audit against the 10-lookup limit. The catch: your domain's DNS must be on Cloudflare.
dmarcian Personal. dmarcian's pricing page offers a US$0 plan but describes it as for non-business personal use, so it is not an option for a company domain.
Open-source parsers. Tools such as parsedmarc can read reports from a mailbox and load them into a dashboard. They are free and keep data in-house, but someone has to run and update the server. That is rarely worth it for a business with one domain.
Paid DMARC services and prices
Paid services add named sources (so you see 'Mailchimp' instead of an IP range), alerts when a new sender appears, longer history and more domains. Prices below are list prices in US dollars, as of October 2026.
| Service | Entry paid plan | Price (approx.) | Notes |
|---|---|---|---|
| Postmark DMARC Digests | Per domain | US$14/month | Web dashboard plus weekly and monthly email digests |
| dmarcian | Basic | US$19.99/month billed yearly, US$24 monthly | Aimed at a single domain; Plus is US$199/month billed yearly |
| EasyDMARC | DMARC Plus | US$35.99/month billed yearly, US$44.99 monthly | Includes up to 100,000 emails a month |
| URIports | Sand | US$15/year | For personal and hobby projects only; business plans cost more |
Watch the limits. Many plans price by email volume or number of domains, and parked domains you own (which should also have p=reject) count too. If you have three domains, a per-domain price triples.
Which DMARC tool suits which business
A free tool is enough if
- You have one domain and send through one mail platform plus one or two tools
- Your DNS is already on Cloudflare
- You are happy to read a weekly email and act on surprises
- You are monitoring a domain that has already reached p=reject
Pay for a service if
- You send through many services: CRM, invoicing, newsletters, booking, website forms
- You manage several domains or brands
- You want alerts and a named list of sources
- You want vendor help to move to p=quarantine and p=reject safely
Whichever you pick, the tool only tells you what is happening. The fixes (adding a service to SPF, turning on DKIM for your newsletter platform) are covered in our guides to SPF, DKIM and DMARC and fixing DKIM failures.
A 15-minute monthly DMARC routine
DMARC monitoring fails when nobody looks. Put this in the calendar for the first working day of each month.
Monthly DMARC check
When nearly all legitimate mail passes for a few weeks, it is time to tighten the policy. Our guide to DMARC p=none, quarantine and reject gives a staged timeline. Note that RFC 9989 deprecates the pct tag, so plan the move in steps of policy rather than percentages.
Do it yourself or get help?
Setting up a free tool takes ten minutes: add its rua address to your DMARC record and wait a few days for reports. The work is in understanding the sources and fixing each sender without breaking invoices or newsletters.
Our email deliverability fix (S$249) sets up DMARC reporting, identifies your legitimate senders, fixes SPF and DKIM for each and recommends when to move to quarantine and reject.
Frequently asked questions
Yes. Postmark sends a free weekly DMARC summary by email, and Cloudflare DMARC Management is free for any domain whose DNS is on Cloudflare. Open-source parsers are also free if you can host one. Note that dmarcian's free plan is described as for non-business personal use only, so it does not fit a company domain.
Use a tool rather than opening the files. Each report lists sending IP addresses, how many messages each sent as your domain, whether SPF and DKIM passed and aligned, and what the receiver did. A DMARC tool groups this by sending service so you can see which legitimate services still fail and which sources may be spoofing you.
No. Many small businesses reach p=reject with a free tool and careful checking of each sending service. A paid service helps when you have many senders or domains, want alerts for new sources, or want vendor guidance. The decision rests on how complex your email setup is, not on company size.
Aggregate reports contain sending IP addresses, counts and authentication results, not message content. Failure reports can include message details, which is why few large providers send them. The May 2026 DMARC update adds more guidance on personal data risks. Check where a hosted DMARC tool stores data before you point reports at it.
Weekly while you are fixing senders and preparing to tighten your policy, then monthly once you reach p=reject. Also check whenever you add a new email service, such as a CRM, booking system or newsletter tool, because a new sender that is not set up correctly will start failing DMARC straight away.