Who sends email in your name?
Alignmarc lists everything sending under your domain — your own tools and everyone else’s — and tells you whether you can shut out spoofing without breaking anything.
One line to publish in your DNS. Nothing to install, nothing to change in your email. Reversible at any time.
Found on garnier-logistics.com, 72 h after signing up
Almost every one of our users finds at least one sender they had forgotten about. Never an IP address without a name beside it.
Hosted in Europe, answered by people
Servers and data in France. You write, someone answers within one business day.
A report you can hand over
Not one more dashboard: a dated PDF your management or your client can read, to pass on exactly as it is.
Five minutes to start
One line to publish in your DNS. Nothing to install, nothing to change in your email. The first reports arrive within 24 to 72 h.
How it works
STEP 1
Publish one line
One line to copy into your DNS. It changes nothing about your sending, and comes out whenever you want. If you already have a DMARC record, we merge with it without touching your policy.
STEP 2
The reports arrive
Within 24 to 72 h, recipients send us their authentication reports. We turn them into names. There is no “check” button for you to click.
STEP 3
You decide
Approve your senders, fix what needs fixing, then tighten the policy. With no risk to your invoices — and we write to you as soon as an unrecognized sender shows up.
WITH AND WITHOUT
Publishing DMARC does not protect you. Reading it does.
On p=none, your domain keeps a log nobody opens. Meanwhile the estate keeps moving: a tool plugged in by another team, a provider changing infrastructure. The share of your sending you can actually account for goes down, and nothing warns you.
Share of your sending authenticated and recognized
- With Alignmarc
- DMARC published, never read
- First reports
- Senders identified
- Alignment fixed
- Reject enabled
An illustration of the mechanism, not a customer average. How long it takes you depends on how many senders need straightening out.
FEEDBACK
What they found when they opened their reports.
Six domains, six different situations. Not one of them called for changing host or email provider.
-
« We had had DMARC for two years. Nobody opened the reports. Within three days I knew our invoicing tool was sending unsigned. »
Karim B. IT director, veterinary clinic group
-
« I tried to read the XML once. Now I get tool names and one sentence telling me what to fix. »
Élodie R. IT manager, food industry
-
« The alert landed on a Tuesday: a contractor was chasing our customers from a server nobody knew about. »
Sophie M. Administrative director, construction SME
-
« I hand the PDF to the client at the end of the engagement. It beats a screenshot of their DNS zone. »
Thomas V. Independent consultant
-
« Moving to reject scared me. The verdict told me to wait eleven more days. It was right. »
Nicolas D. Infrastructure lead, software vendor
-
« Two brands, one sending domain. I can finally see which of the two platforms signs properly. »
Julien P. CRM manager, specialty retail
Pricing
One domain free, no credit card.
Annual billing: two months free.
Discovery
To see what is happening on one domain.
- 1 domain
- 30 days of history
- Enforcement verdict
- Sender identification
- Weekly digest
Pro
To actually run your authentication.
- 5 domains
- 12 months of history
- Real-time alerts
- Sender triage
- PDF report export
Enterprise
For a portfolio of domains to keep in order.
- 25 domains
- 12 months of history
- Real-time alerts
- PDF report export
- Priority support
More than 25 domains, sub-accounts or white labeling? See the custom plan
Prices exclude tax. Applicable VAT is added at checkout.
For service providers and custom needs
The report carries your logo, not ours.
Manage 5 to 30 domains and hand every client a dated document: the evidence before, the evidence after. You sell your work, Alignmarc stays backstage.
garnier-logistics.com
Four compliant senders. One unrecognized sender dismissed on August 14. Policy tightened to quarantine.
Compliance rate: 99.4% · 20,253 messages analyzed
- Unlimited domains
- Sub-accounts per client
- White-labeled PDF report
- Priority support
- Scoping and onboarding
What people ask us before signing up.
No. You add a destination address to your DMARC record. Your email goes out exactly as before, through the same servers. DMARC in monitoring mode has no effect on delivery.
We keep it. The line we give you carries your policy over as it stands and simply adds our address to your report recipients. We will never offer to replace a quarantine with plain monitoring.
In France, at Scaleway: the site, the database and the archived reports. Only inbound mail passes through Mailgun’s European region. Raw reports are archived encrypted for thirteen months, then purged automatically.
No, and that is an architectural choice. Authentication reports contain statistics only: sending IP address, volume, authentication results. We do not request forensic reports, which would carry headers from real messages.
24 to 72 hours after you publish your DNS line. The delay comes from the receivers: Google, Microsoft and Yahoo each issue one report per day, on their own schedule.
Adding a domain is blocked and we offer you a plan change. Nothing is deleted, and nothing is charged without your agreement.
Know who sends in your name.
Free for 30 days. Data hosted in France.