SPF, DKIM & DMARC setup
We inventory the services that send mail as your domain, then publish or correct the SPF, DKIM, and DMARC records so legitimate mail is authenticated.
- Review of current DNS and mail-sending services
- SPF, DKIM, and a starting DMARC record (p=none) published and checked
- Deliverable: short written summary of what changed and why
Guided DMARC enforcement rollout
Moving straight to a strict policy can block your own mail. We step the policy from p=none to quarantine to reject over 30–90 days, reviewing DMARC reports at each stage and fixing senders before tightening.
- Staged policy changes, each one approved by you
- Report review between stages
- Rollback to the previous record if anything legitimate starts failing
DMARC monitoring & report
Once enforcement is in place, we review your DMARC reports each month and send a short note: what passed, what failed, and anything new sending as your domain.
Your accounts stay yours
- You keep ownership of your domain, DNS, and email accounts
- We work through delegated access — no shared passwords
- We back up your current records and have a rollback plan before every change
- Nothing changes without a signed authorization
Pricing
Every engagement is quoted after a short scoping call. Prices are plus applicable Washington sales tax. Projects under $1,000 are paid in full before work starts; $1,000 and up take a 50% deposit to schedule, with the balance due on delivery. Monthly plans are billed in advance and can be canceled with 30 days’ notice.