In short: IRONSCALES DMARC is a hosted DMARC management service that collects authentication reports, hosts DMARC, SPF, DKIM, BIMI and MTA-STS records, and guides you from p=none to p=reject without breaking legitimate mail. It is licensed per domain in DMARC and DMARC Pro options and managed in the IRONSCALES console.
What IRONSCALES DMARC is
DMARC lets you tell receiving mail servers what to do with messages that claim to come from your domain but fail SPF or DKIM checks. Getting to a policy of p=reject protects your customers and suppliers from spoofed email in your name, but doing it safely means first finding every legitimate service that sends as you, from your CRM to your payroll provider.
IRONSCALES DMARC handles that work. It collects and decodes DMARC aggregate reports, shows every sending source in a dashboard and walks you through fixing each one before tightening the policy. It is managed from the same console as IRONSCALES email security.
What is included
- Hosted DMARC: point a CNAME at IRONSCALES and change policy from the portal instead of editing DNS
- Hosted SPF: SPF records are flattened automatically at frequent intervals, avoiding the 10-lookup limit that breaks SPF for organisations with many senders
- Hosted DKIM: manage DKIM keys from the portal
- Hosted BIMI: publish your brand logo and certificate so supporting inboxes can display it
- Hosted MTA-STS and TLS-RPT: enforce encrypted transport for inbound mail and receive reports
- Monitoring and alerts for new failing senders, misalignment, policy drift and DNS changes
- Guided enforcement from p=none through p=quarantine to p=reject, telling you when it is safe to move on
| Option | Licensed |
|---|---|
| IRONSCALES DMARC | Per domain |
| IRONSCALES DMARC Pro | Per domain, higher tier |
IRONSCALES does not publish the feature split between DMARC and DMARC Pro, so we confirm which of the capabilities above each one includes when we quote.
How it is licensed
IRONSCALES DMARC is licensed per domain, not per user. Count every domain you send from and every domain you own but do not send from, since parked domains should also be protected with a reject policy. Subdomains and third-party senders are handled within the domain. We bill monthly on your Forever Systems account and add or remove domains as you need. Ask us for a quote for your domain count.
Requirements and deployment
You need access to your DNS to add the records IRONSCALES provides, usually a small number of CNAME and TXT records per domain. Aggregate reports start arriving once receiving mail providers pick up the new records. How long it takes to reach p=reject depends on how many services send email as you and how quickly each one can be fixed. IRONSCALES DMARC does not depend on which mail platform you use.
Who it suits and how we help
It suits organisations that need DMARC for supplier or customer requirements, cyber insurance or simply to stop spoofing, and do not have DNS specialists in-house. It is particularly convenient if you already use IRONSCALES email security. We add the records, identify your legitimate senders, fix SPF and DKIM with each one and move you to enforcement. Once you reach p=reject, we keep watching the reports so that a new marketing platform or supplier system does not start failing silently, and we add BIMI and MTA-STS if you want them. Compare other options in DMARC and email authentication.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is IRONSCALES DMARC licensed per user?
No. It is licensed per domain. Count each sending domain and any parked domains you want to protect.
Can IRONSCALES DMARC fix the SPF 10-lookup limit?
Yes. Its hosted SPF service flattens SPF records automatically so you stay within the DNS lookup limit as senders change.
How long does it take to get to p=reject?
It depends on how many services send email as your domain and how quickly each can be configured for SPF and DKIM. IRONSCALES DMARC tells you when it is safe to move to the next policy stage.
Can I buy IRONSCALES DMARC without IRONSCALES email security?
DMARC is a separate per-domain IRONSCALES licence, and IRONSCALES presents it as an add-on alongside its email security plans. Ask us and we will confirm whether it can be taken on its own for your account.