In short: EasyDMARC Managed DMARC hosts your DMARC record behind a single CNAME and turns aggregate and failure reports into a clear list of everyone sending as your domain. Policy, alignment and reporting changes are made in the dashboard, not DNS. Forever Systems licenses it per domain, monthly, and manages the journey to p=reject.
What Managed DMARC is
A DMARC record is a short line of text in DNS, but it controls what happens to every email that claims to come from your domain. Changing it normally means a DNS change request, a wait, and a risk of typos that stop reports arriving or let spoofed mail through.
With EasyDMARC Managed DMARC you publish a CNAME record once. It points to a record EasyDMARC hosts and updates as soon as you save a change in the dashboard. From then on the policy (p), subdomain policy (sp), enforcement percentage (pct), SPF and DKIM alignment modes (aspf and adkim), reporting addresses (rua and ruf), failure reporting options (fo) and reporting interval (ri) are all set through the interface. Each change is validated before it is published, every version is kept with the name of whoever made it, and you can roll back to an earlier version in one click.
What is included
| Capability | What you get |
|---|---|
| Aggregate (RUA) reporting | Daily reports from receiving mail servers, turned into charts and source lists instead of XML |
| Failure (RUF) reporting | Message-level failure samples where receivers send them |
| Sender identification | Sources grouped by service, so you can see Microsoft 365, Google Workspace, your CRM and unknown senders at a glance |
| Hosted policy | Policy, alignment and reporting settings changed from the dashboard |
| Staged enforcement | Move from none to quarantine to reject in stages, checking the reports at each step |
| Alerts | DMARC alerts sent to Microsoft Teams, Slack, Google Chat or a webhook, wherever your team already looks |
| Change control | Every change versioned and attributed, with approvals, role-based access and change logs you can export for auditors |
| Unlimited users | No per-user charge for viewing reports |
Managed DMARC sits alongside EasySPF, Managed DKIM, Managed BIMI and MTA-STS on the same platform, so one console covers all of your email authentication records.
How it is licensed
Managed DMARC is not a separate subscription. It is part of the EasyDMARC platform we supply, licensed per domain with an agreed monthly email volume and billed monthly on your Forever Systems invoice. The same licence covers EasySPF, Managed DKIM, Managed BIMI, MTA-STS with TLS reporting and DNS Manager, and you can add or remove domains at any time. The EasyDMARC licensing page sets out the optional Sender Insights and Threat Intelligence add-ons.
Every domain you own needs covering, not just the ones that send email: a parked domain with no DMARC record is an easy target for spoofers. Your quote depends on the number of domains, the email volume they send and any add-ons you choose, so ask us for a quote.
Setting it up
Getting started needs access to your DNS and a list of the domains you own. We publish the Managed DMARC CNAME at a monitoring policy (p=none) so nothing is blocked while the first reports arrive. After a week or two of reports we work through every source: legitimate services get SPF and DKIM set up so they align with your From domain, and unknown sources are investigated. Once legitimate mail passes, we move to quarantine and then reject, using the enforcement percentage (pct) to apply the policy to a growing share of mail, as EasyDMARC recommends.
The process needs your help in places, because someone has to say whether that marketing platform or old payroll service is still in use. We keep that list short and plain.
Who it suits and how we help
Managed DMARC suits any organisation that wants to stop spoofing of its domains without hiring a specialist: companies with several brands, schools and trusts with many domains, charities sending fundraising campaigns and firms whose customers have received fake invoices. If you already have reports but no time to act on them, we can take over an existing setup.
We handle the setup, the sender clean-up, enforcement and ongoing monitoring, and the licence sits on one invoice with the rest of your software. Compare other DMARC and email authentication products or go back to EasyDMARC licensing.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is the difference between DMARC monitoring and Managed DMARC?
Monitoring reads the reports. Managed DMARC also hosts the DMARC record itself, so you can change policy and reporting settings from the dashboard without editing DNS each time.
Will moving to p=reject stop my own email?
Not if it is done in stages. We only enforce once the reports show your legitimate senders passing SPF or DKIM in alignment, and we step the policy up gradually while watching the results.
Do I need to change my DNS provider?
No. You keep your DNS where it is and add one CNAME record for DMARC. EasyDMARC hosts the record that CNAME points to.
Does Managed DMARC work with Microsoft 365 and Google Workspace?
Yes. DMARC is independent of your email platform. EasyDMARC identifies Microsoft 365 and Google Workspace traffic in the reports, and we make sure DKIM signing is switched on for your domains.