Configuration Management

Email authentication (DMARC)

Nobody can send email that pretends to come from your domain.

Addresses 31 stories in our coverage in the last 90 days 4 products that provide it

What it is

Publishing SPF, DKIM and an enforced DMARC policy, and monitoring the reports, so receiving mail servers reject messages that spoof your domain.

How to value it

Email spoofing your own domain is used to defraud your customers and suppliers, and it damages trust in your brand. The large mailbox providers now require DMARC from bulk senders. Enforcement is mostly a configuration project; the tools help you find every legitimate sender first, so nothing breaks.

Questions to ask a vendor

  1. 1Will it get us to p=reject without blocking our own legitimate mail?
  2. 2Does it identify every service that sends mail as our domain?
  3. 3Does it cover all our domains, including parked ones?
  4. 4Does it support BIMI and MTA-STS?

For your risk register

Risk
Criminals send fraudulent email in our name to customers and suppliers.
Control
SPF, DKIM and DMARC at p=reject on all domains.
Owner
IT operations lead.
Measure
Domains at DMARC enforcement.

A starting point: set the owner and measure to fit your organisation.

Products that provide it

Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.

Recent stories it addresses

72 stories in total

How we list vendors

  • A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
  • Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
  • Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
  • Logos, product names and quoted text belong to the vendors and are shown to identify them.
  • Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.