In short: EasySPF is EasyDMARC's managed SPF service. You publish one SPF record and manage your sending services from a dashboard; EasySPF flattens their includes into IP ranges so the record stays under SPF's 10 DNS lookup limit, and refreshes them when providers change. Forever Systems licenses it per domain as part of the EasyDMARC platform.
The problem EasySPF solves
SPF (Sender Policy Framework) is a DNS record listing the servers allowed to send email for your domain. Most organisations list their senders with include statements: one for Microsoft 365 or Google Workspace, one for the CRM, one for the marketing platform, one for the helpdesk. Each include can contain further includes, and the SPF standard (RFC 7208) allows only 10 DNS lookups in total when a receiver checks the record.
Go over the limit and receivers return a PermError: SPF fails for every message, and DMARC can fail too unless DKIM is aligned. The usual workaround, copying all of the providers' IP addresses into the record by hand, goes out of date as soon as a provider changes its infrastructure. EasySPF automates that work.
How EasySPF works
- One record: you publish a single EasySPF TXT record for the domain instead of maintaining a long list yourself.
- Flattening: EasySPF resolves the includes of your configured senders into direct IP ranges, cutting the number of DNS lookups a receiver has to make.
- Automatic refresh: it watches the providers' published SPF data and refreshes the flattened ranges when they change.
- Dashboard management: add senders from a list of recognised providers, or as custom includes and IPv4 or IPv6 ranges with a label, without editing raw DNS.
- Discovery from DMARC reports: where DMARC aggregate reporting is in place, EasySPF can flag sending sources that are not yet in your SPF configuration.
- Audit log: additions, removals and changes are logged with the user who made them.
When you add a domain, its existing SPF entries are shown so they can be reviewed before you switch over. EasyDMARC publishes setup guides for common senders such as Microsoft 365, Google Workspace, SendGrid, Amazon SES, Mailgun and Salesforce. EasySPF can also be used before DMARC is in place, although the two work best together.
How EasySPF is licensed
EasySPF is not sold on its own through us. It is part of the EasyDMARC platform, alongside Managed DMARC, Managed DKIM, Managed BIMI and MTA-STS, and is licensed per domain, with an agreed monthly email volume and billed monthly.
| Item | How it works |
|---|---|
| Licence unit | Per domain. A subdomain that sends mail and needs its own SPF record is set up as a separate EasySPF-managed domain, so list those when you ask for a quote |
| Term | Monthly, on your Forever Systems invoice |
| Users | No per-user charge |
| Add-ons | Sender Insights and Threat Intelligence are optional |
On EasyDMARC's direct plans EasySPF is not part of the entry-level DMARC Plus plan; through us it is included for every domain. Ask us for a quote for the domains you want covered.
What EasySPF does not do
SPF on its own does not prove an email is genuine. For DMARC to pass, SPF must pass and align with the domain in the visible From address, or DKIM must pass in alignment. Many marketing and ticketing platforms send with their own return-path domain, so SPF never aligns for them and DKIM is what makes DMARC pass. We check both for every sender rather than relying on SPF alone.
Flattening also depends on providers publishing accurate SPF data. Where a service does not, we add its ranges manually and keep an eye on the reports.
Who it suits and how we help
EasySPF suits organisations that use many cloud services to send email, have hit the lookup limit already, or have an SPF record nobody dares to touch. We review your current record, move it onto EasySPF without a gap in coverage, and keep the sender list up to date as you add and retire services. It sits on one invoice with your other subscriptions. See all DMARC and email authentication products or return to EasyDMARC licensing.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What happens if my SPF record has more than 10 lookups?
Receiving servers return a PermError and treat SPF as failed for every message. EasySPF flattens your senders into IP ranges so the record stays within the limit.
Is SPF flattening safe?
Manual flattening goes stale when a provider changes its IP addresses. EasySPF monitors the providers' published SPF data and refreshes the ranges automatically, which removes most of that risk.
Can I buy EasySPF on its own?
Through us EasySPF comes as part of the EasyDMARC platform, licensed per domain and billed monthly, together with Managed DMARC, Managed DKIM and Managed BIMI.
Do I still need DKIM if I use EasySPF?
Yes. DKIM survives forwarding where SPF often fails, and many third-party senders only align with DMARC through DKIM. We set up both.