DMARC, minus the pain
Your email provider sends you reports.
Nobody reads them.
Since Google, Yahoo and Microsoft started requiring DMARC, every sending domain gets dense XML aggregate reports. DmarcDuck turns them into one honest answer: is my email healthy, and is anyone pretending to be me?
No account needed for the analyzer. Files are parsed, shown, and the shareable link expires in 7 days.
Drop a report
Grab any DMARC aggregate report — the XML (often zipped) your inbox provider already sends you. Drag it onto the analyzer. No signup, no email, no fine print.
Get plain-language answers
Who is sending as you, whether it authenticated, and what to fix first. Every failing source is explained: spoofing, a forgotten sender, or a misconfigured tool.
Then let it watch
Register a domain and forward reports to your private address. Get an alert when a new source appears and a weekly digest you can read in 30 seconds.
Built by someone who hates bad software pricing
The big DMARC platforms charge $14+ per domain, per month — aimed at companies with procurement budgets. The free tools stop at a one-shot parser with hard limits. That leaves the rest of us: indie founders, small agencies, side projects, a personal domain with a newsletter.
DmarcDuck is the middle: a genuinely useful free analyzer, and multi-domain monitoring from $7/month — flat, honest, no per-domain tax.
No fake logos or testimonials
There is no 'trusted by 10,000 teams' here. There is a parser with tests and a pricing page without asterisks.
No AI magic — on purpose
This is a parsing and clarity problem. Adding a language model would make it slower, less predictable, and pricier. We didn't.
You can leave
Your domains, your reports. CSV export on paid plans, delete a domain and its data is gone. No hostage-taking.
Try it with a report you already have
Check your inbox for a “DMARC Report” from Google or Yahoo — or point your rua address somewhere you can grab one. Then: