In short: Valimail is a cloud platform that automates SPF, DKIM and DMARC so your domains can reach enforcement and stop criminals spoofing them. Forever Systems supplies Valimail Core and Valimail Pro per domain on your monthly invoice: Core automates authentication, while Pro adds BIMI logo management, MTA-STS and continuous protection reporting.
What Valimail does
Email was never designed to prove who sent it, so anyone can put your domain in the From line of a fake invoice. DMARC fixes that by telling receiving mail servers to reject or quarantine messages that fail SPF and DKIM checks, and by sending you reports on every source that uses your domain. Getting there is the hard part: most organisations send email through a surprising number of services, from Microsoft 365 or Google Workspace to CRM, finance, HR and marketing platforms, and each one has to be authorised before you can safely switch on a reject policy.
Valimail's approach is automation. Instead of editing DNS records by hand every time a service is added or changes its sending infrastructure, you make a one-time set of DNS changes and then manage authentication from the Valimail console. Its main building blocks are:
- Instant SPF: Valimail's hosted SPF, which answers each SPF query with a record tailored to the sending server, so you are not limited by SPF's ten DNS lookup rule
- A library of known sending services: a large catalogue of email platforms is recognised by name, so a legitimate sender can usually be authorised in a click
- Automated DMARC and DKIM management: policy changes and DKIM configuration handled from the dashboard
- One console for every domain, with role-based access so your IT team, marketing team and auditors each see what they need
There is a deliverability reason as well as a security one. Google and Yahoo have required DMARC from bulk senders since 2024, Microsoft introduced similar rules for high-volume senders to Outlook.com addresses in 2025, and the NCSC recommends that every UK organisation publishes DMARC and works towards a reject policy.
Valimail Core and Valimail Pro compared
We supply Valimail in two editions designed for managed delivery, which keep all of your domains in one tenant that we run alongside you. Valimail's partner pages call them DMARC Core and DMARC Pro. If you have looked at Valimail's direct plans you will also see Monitor (a free visibility tool), Enforce and Amplify; Core and Pro bring the same automation together in a multi-tenant form we can license and manage for you.
| Capability | Valimail Core | Valimail Pro |
|---|---|---|
| Automated SPF (Instant SPF), DKIM and DMARC | Yes | Yes |
| Sender discovery and one-click authorisation | Yes | Yes |
| Multi-domain dashboard with role-based access | Yes | Yes |
| Team alerting | Yes | Yes |
| BIMI brand logo management | No | Yes |
| MTA-STS encrypted email transport | No | Yes |
| Continuous protection reporting (DKIM keys, unused senders, misconfigurations) | No | Yes |
| Advanced alerting and policy change detection | No | Yes |
| API access for automation | No | Yes |
Core is the right starting point for most organisations that simply need to stop spoofing and meet mailbox provider rules. Pro suits organisations with a large or changing email estate, a brand they want shown in the inbox, or auditors who want evidence that authentication stays correct over time.
How Valimail is licensed
Valimail is priced per domain, not per mailbox, so the size of your workforce does not drive the cost.
- Protected domains: each domain under full Valimail management on Core or Pro
- Reporting-only domains: a lighter option for domains where you only need DMARC visibility rather than full managed enforcement
- Overage: an overage line can apply if use goes beyond what your plan includes; we explain how this works for your domains when we quote
- Billing: on your monthly Forever Systems invoice, with no separate contract to manage with Valimail
Remember that parked and non-sending domains count too. They are popular with spoofers precisely because nobody watches them, so they should carry a reject policy. Pricing depends on the number of domains, the edition and how much of the day-to-day management you want from us, so ask us for a quote. Our guide to monthly and annual licence terms explains how subscription terms work across vendors.
Buying Valimail through Forever Systems
Most DMARC projects stall at a monitoring policy because nobody has time to read the reports. When you license Valimail through us, we take that work on:
- Inventory: list every domain you own, including legacy and parked domains, and agree which need full protection and which need reporting only.
- Connect: make the one-time DNS changes that hand SPF and DMARC management to Valimail.
- Authorise senders: review the services sending as you, approve the legitimate ones and chase down the unknowns.
- Enforce: move each domain to quarantine and then reject, checking reports at each step.
- Keep it right: alerts and regular reviews when a new service starts sending or something changes.
You get one account, one invoice and one renewal calendar alongside the rest of your software, and you can add domains, retire them or move from Core to Pro without starting a new contract.
Who Valimail suits
Valimail suits organisations that send from several services or domains, have had customers or suppliers receive fake emails in their name, need to meet Google, Yahoo or Microsoft sender rules, or have an insurer or public sector client asking about DMARC.
If you would like to compare options, look at EasyDMARC or the Hornetsecurity DMARC Manager, or browse every product in DMARC and email authentication. DMARC protects your domain in other people's inboxes; you still need email security software to filter the phishing sent to your own staff.
Explore Valimail
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Valimail licensed per user or per domain?
Per domain. The cost is driven by how many domains you protect and which edition you choose, not by the number of mailboxes in your organisation.
What is the difference between Valimail Core and Valimail Pro?
Core automates SPF, DKIM and DMARC across your domains. Pro includes everything in Core and adds BIMI logo management, MTA-STS, continuous protection reporting, advanced alerting and API access.
Do I need to change my DNS to use Valimail?
Yes, once. You make a small set of DNS changes that delegate SPF and DMARC management to Valimail. After that, authorising a new sender or changing policy is done in the Valimail console rather than in DNS.
Does Valimail work with Microsoft 365 and Google Workspace?
Yes. Both are recognised sending services in Valimail's library, alongside many other platforms such as CRM, payroll and marketing tools.
Does Valimail stop phishing emails reaching my staff?
Not on its own. DMARC stops criminals impersonating your domain to others. To filter phishing and malware coming into your organisation, pair it with inbound email security.