grimDMARC
|
Get Started
grimDMARC
Trust every email
NEW: Hosted Services Are Live — Learn more

Move to p=reject without touching a DNS panel again.

Most DMARC tools stop at reporting — you still log into DNS yourself for every policy change. grimDMARC publishes once, then stages your rollout to full enforcement automatically: p=none to p=reject in as little as 60 days, monitored the whole way, from one dashboard covering every customer domain.

Want this scanner on your own site? Build & publish your own →

Simple, linear pricing per domain

Managing customer domains at scale? Contact us for pricing and onboarding.

Contact us

Why teams pick grimDMARC

Not another dashboard that reports problems and leaves the DNS work to you.

Publish once, enforce forever
One CNAME record, set one time. Every policy change after that — none to quarantine to reject — happens in our dashboard, not your DNS provider.
Enforcement in 60 days
We stage the rollout automatically and watch the reports for you, so reaching p=reject takes weeks backed by real data — not a manual, quarter-long slog.
Built for MSPs, not bolted on
One dashboard covers every customer domain from day one — no per-customer DNS logins, no spreadsheet to track who's where.

Go from setup to full enforcement in 3 steps

Designed to take you from monitoring to p=reject in weeks — not years.

1
Connect once via CNAME
Add a single CNAME record to the customer's DNS panel. You never have to log back into their registrar again.
2
Manage email security centrally
Control DMARC, SPF, BIMI and MTA-STS across every customer domain from a single dashboard — no waiting on DNS propagation, no copy-pasting raw TXT records.
3
Autopilot to p=reject
grimDMARC watches the aggregate reports and safely stages the rollout to full enforcement — in as little as 60 days.

Hosted Services

Four DNS-based standards, one place to manage all of them.

Hosted DMARC
Set policies once. Change them centrally.
Hosted SPF
Managed include chains. Lookup-safe.
Hosted BIMI
Logo verification and VMC guidance.
Hosted MTA-STS
Transport security kept in sync.
Comparing DMARC providers? See how grimDMARC differs →

Build your own records

No domain yet, or just want to draft a record before publishing? Build one from scratch, or paste one you already wrote to check it against the spec — entirely in your browser, nothing logged.

SPF Builder & Validator
Pick your senders, get a ready-to-publish record. Or paste one to catch syntax errors.
Open tool →
DMARC Builder & Validator
Set policy, reporting and alignment with guided defaults, or validate an existing record.
Open tool →
BIMI Builder & Validator
Assemble a valid logo + VMC record, or check one you already have.
Open tool →

Latest from the blog

View all posts →
Sep 16, 2026
RUF: The DMARC Tag Almost Nobody Still Uses
Aug 30, 2026
What Is the RUA Tag? A Plain-English Explanation
Aug 20, 2026
Everyone Talks About DMARC. Almost Nobody Turns On MTA-STS.
Aug 13, 2026
p=none Is Like Locking the Door and Leaving the Key in It
Aug 5, 2026
DMARC for MSPs: Why a Multi-Tenant Platform Beats a Single-Domain Tool
Jul 20, 2026
Why We Built grimDMARC Around Customers, Not Domains
Jul 15, 2026
BIMI Explained: Why Some Company Logos Show Up in Gmail (And Yours Might Not)
Jul 11, 2026
Our Analyzer Tools in Action: A Real Domain, Real Results
Jul 11, 2026
Introducing SPF, DMARC and BIMI Builders
Jul 10, 2026
The BIMI Analyzer Is Live — Our Free Analyzer Suite Is Now Complete

Frequently asked questions

More questions? See the full comparison FAQ, or talk to us directly.

How much does grimDMARC cost?+

Pricing is linear per active domain per month — no per-seat or per-customer fees. Contact us via the contact page for current rates and onboarding.

Does grimDMARC support SPF, BIMI and MTA-STS, not just DMARC?+

Hosted DMARC, MTA-STS, TLS-RPT and BIMI are live today from one dashboard. Hosted SPF is in active development — see the Hosted Solutions page for current status of each service.

Is grimDMARC an MSP-only product?+

No — the platform works for a single domain too. But its object model (MSP → Customer → Domain → Services) and its bulk CSV onboarding are built for the workflow of managing many customers' domains at once, which is where it differs most from single-domain-first tools.

Where is grimDMARC's data hosted?+

grimDMARC is built by a Swedish company on EU-based infrastructure, with GDPR compliance as a default rather than an add-on. See the Privacy Policy for the current list of processors.

Ready to stop touching DNS for every policy change?

Contact us for pricing, or book a 15-minute walkthrough if you'd rather see it first.

Contact usBook a walkthrough