In short: Hornetsecurity DMARC Manager is a cloud service for setting up and monitoring email authentication. It configures DMARC, DKIM, SPF and TLS settings for multiple domains, aggregates DMARC reports to show every source sending as your domain, alerts on failures and supports BIMI logos. It is included in 365 Total Protection Plan 4.
What DMARC Manager is
Anyone can send an email that claims to come from your domain. SPF, DKIM and DMARC are the DNS-based standards that let receiving servers check whether a message really came from you, and tell them what to do if it did not. Google and Yahoo now require authentication for bulk senders, and a domain with no DMARC policy is an easy target for impersonation.
The hard part is not publishing a record; it is finding every system that legitimately sends as you (the CRM, the accounts package, the website form, the marketing platform) before you tell the world to reject everything else. DMARC Manager collects the reports that receiving servers send back and turns them into a clear picture, so you can get to enforcement without blocking your own mail.
What is included
| Feature | What it does |
|---|---|
| Domain Configurator | Sets up and maintains DMARC, DKIM, SPF and TLS settings for multiple domains |
| Status dashboard | Overview of managed domains, senders, volumes and DMARC pass and fail rates |
| Email sources analysis | Shows every source sending email using your domains |
| DMARC report aggregation | Collects aggregate reports from receiving servers into one view |
| Failure reports and alerts | Real-time data on messages that fail DMARC checks |
| BIMI | Displays your logo beside your emails in supporting inboxes |
| SMTP-TLS | Helps make sure outbound mail is transmitted securely over TLS |
How it is licensed
DMARC Manager is part of 365 Total Protection Plan 4, which is licensed per user. Hornetsecurity also lists it as a service in its own right, so if you already have email filtering you are happy with, we can check whether it can be licensed for you without moving to Plan 4.
| Option | Includes DMARC Manager |
|---|---|
| 365 Total Protection Plans 1 to 3 | No |
| 365 Total Protection Plan 4 | Yes |
| DMARC Manager on its own | Ask us to confirm availability |
BIMI logo display in some mailbox providers needs a verified mark certificate, which is bought separately from a certificate authority.
How a DMARC project runs
- Monitor: publish a DMARC record at policy none and send reports to DMARC Manager.
- Identify: review the sources sending as your domains and fix SPF and DKIM for each legitimate one.
- Quarantine: once legitimate mail passes, move to a quarantine policy so failing mail goes to spam.
- Reject: move to reject, so spoofed mail is refused outright, and keep monitoring for new senders.
You need access to your DNS to publish the records. The NCSC recommends that UK organisations use DMARC, SPF and DKIM, and a staged rollout like this is the usual way to get there safely.
Who it suits and how we help
DMARC Manager suits any organisation with more than a simple email setup: several domains, third-party senders, or marketing mail that keeps landing in spam. See other tools in DMARC and email authentication.
We set up the reporting, work through your senders with you and plan the move to enforcement, so legitimate mail keeps flowing. Ask us for a quote for Plan 4 or for DMARC Manager on its own.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What does Hornetsecurity DMARC Manager do?
It sets up and maintains DMARC, DKIM, SPF and SMTP-TLS for your domains, aggregates DMARC reports to show who sends email as you, alerts you to failures and supports BIMI logos.
Is DMARC Manager included in 365 Total Protection?
It is included in Plan 4 Compliance and Awareness. It is not part of Plans 1 to 3; ask us whether it can be licensed separately for your organisation.
Will moving to DMARC reject block our own emails?
Not if you follow the stages. DMARC Manager shows every source sending as your domain, so you can authenticate legitimate senders before moving to quarantine and reject.
Do I need DMARC for Google and Yahoo?
Google and Yahoo require bulk senders to authenticate mail with SPF and DKIM and to publish a DMARC policy. Even below their bulk thresholds, a DMARC policy makes it much harder for others to send email that pretends to come from your domain.