DMARC Shield · Email authentication
Stop email spoofing
before it hits your customers
Continuous domain monitoring, clear next steps, and hands-on help when you need it — so invoices, logins, and support mail still come from you.
- Free SPF, DKIM, and DMARC scan
- Monthly status emailed to you
- Hands-on fix help when needed
Choose a path
Where do you want to start?
Self-serve for your own domains. A programme path when security or IT owns several brands — or Partners if you deliver for clients.
Businesses
For my business
One or a few domains: monthly status by email, alerts when something slips, and optional guided DMARC rollout. Priced in ZAR, month to month.
- Free domain scan first
- Monitor, Managed, Business, and Business Plus
- Fix Assist for a once-off cleanup
- Client portal at dmarcshield.app
Teams
For my organisation
Several brands or subsidiaries under one programme — role-based access and capacity sized with security and IT, not a spreadsheet of reports.
- Multi-brand email authentication
- Business / Business Plus self-serve or quoted Enterprise
- Talk to sales — no silent checkout
- Enterprise portal at enterprise.dmarcshield.app
How it works
From first scan to ongoing protection
Three clear steps — so you stay in control of email authentication without living in DNS tickets.
See where you stand
We check your domain and show what is missing or weak — in plain language, not a raw dump.
Stay ahead of drift
Continuous monitoring watches DNS and authentication. When something slips, you get an alert.
Ship the fix
Clear next steps on every plan — with guided DNS changes and IT coordination when you need hands-on help.
Status you can act on
Monthly domain summaries by email — who sent as you, what passed or failed, and what to do next — with the same story in the portal when you want the detail.
Prefer ongoing monitoring?
Compare plans for scheduled checks, email summaries, alerts, and clear next steps — ZAR pricing, cancel anytime.
See Plans & Pricing →Security & IT teams
Built for many domains
One place for multi-brand reporting, continuous DNS quality, and the capacity your organisation actually needs — without a spreadsheet of XML reports.
- 01 Fast for distributed teams — portals and reporting stay snappy wherever your people work.
- 02 Reporting that scales — high-volume authentication streams with sender and country context you can act on.
- 03 DNS quality, continuously — multi-record checks and change awareness so drift surfaces early.
- 04 Access for real teams — role-based members and programmes sized for security and IT.
What you get
Outcomes that protect your brand
Monitoring, alerts, and guidance that match how growing teams actually run email.
Monthly domain summary
Senders, pass/fail, and next actions by email on your plan cadence — leadership-ready, not raw XML.
Alerts when posture slips
Broken DNS, weakened policy, or monitoring gaps surface as alerts — before customers notice delivery problems.
Safe DMARC rollout
Move from monitoring toward enforcement with visibility into sender impact — so you progress with confidence.
Who sends as you
Surface systems using your domain — CRM, invoicing, marketing, forms — and keep authorised senders aligned.
DNS health checks
Core authentication records and advanced checks as your plan grows — plus free tools for one-off scans.
Work with your IT provider
Exact change guidance and coordination so DNS updates land safely — you stay in the loop without owning every detail.
What monitoring plans include
Concrete outputs, not buzzwords.
IETF open standards
Checked against the real standards
We watch the authentication records that protect your brand. If policy weakens, SPF softens, or transport security slips — you hear about it early.
DMARC
Policy that tells receivers what to do when mail fails authentication — and gives you the reports to act on.
SPF
Who is allowed to send as your domain — so spoofed mail fails the first gate.
DKIM
Cryptographic proof that mail from your domain was not altered in transit.
TLS-RPT
Visibility into TLS delivery failures on the path to your domain — problems you would otherwise never see.
MTA-STS
Require encrypted delivery to your domain so attackers cannot downgrade the transport path.
BIMI
Brand logo readiness after enforcement — we scan and guide the DNS path (logo display still depends on providers).
ARC
Authentication continuity through forwarding — so legitimate mail survives modern filters.
Why email security matters
Email spoofing still costs businesses billions a year. One forged message can redirect payments, break customer trust, and damage a brand for a long time.
of cyberattacks against businesses start with a spoofed or phishing email
of domains with DMARC records are still misconfigured or left in monitoring-only mode
is the only DMARC policy that actually blocks spoofed email — and most domains never reach it
Built by S-Tech Solutions
S-Tech Solutions is a South African Cyber Security company focused on cloud infrastructure, email security, and managed services.
We built DMARC Shield so South African businesses can move from first scan to a safer policy — continuous monitoring, clear next steps, and hands-on help when you need it.
Industry data · Year on year
The threat is real and growing
Email fraud still costs businesses billions. Latest figures from law enforcement, the anti-phishing industry body, and large-scale platform telemetry — with year-on-year change where published.
Up from $2.77B in 2024
U.S. business email compromise losses reported to the FBI in 2025
FBI IC3 2025 Internet Crime Report →Up from $16.6B in 2024
Total internet crime losses reported to IC3 in 2025 — a new high
FBI IC3 2025 Internet Crime Report →Up slightly from 3.76M in 2024
Phishing attacks observed worldwide across calendar 2025
APWG Phishing Activity Trends Q4 2025 →Microsoft security operations, mid-2024–mid-2025 period
Emails screened per day on average for malware and phishing (Microsoft telemetry)
Microsoft Digital Defense Report 2025 →Top observed entry path in reactive IR cases
Of Microsoft Incident Response engagements started with phishing or social engineering
Microsoft Digital Defense Report 2025 (DART) →~54% click-through vs ~12% for manual phishing (MDDR 2025)
Higher click likelihood on AI-assisted phishing vs traditional phishing (Microsoft research)
Microsoft Digital Defense Report 2025 →Figures are third-party research and law-enforcement reports, not DMARC Shield product metrics. We cite public threat reports only — not DMARC product vendors. Open the original source for methodology.
Common questions
What payment methods do you accept?
We accept credit cards via PayFast and EFT for pre-approved enterprise customers. All pricing is in South African Rand (ZAR) with no hidden fees. Setup (onboarding) fees for subscription plans are shown on the pricing table and charged at signup.
Are there any hidden costs or additional fees?
No. Subscription prices, once-off initial setup, Fix Assist project fees, and optional extras (extra domains, parked domains, sender onboarding packs) are itemised before you pay.
What is included in initial setup and onboarding?
Every subscription includes once-off domain intake, DNS review, identification of email senders, reporting configuration, baseline summary, and portal setup. Managed+ adds DNS change guidance and safe policy progression. Fix Assist is a separate once-off remediation project if you want the fixes without a subscription.
Why is the onboarding fee lower (or free) on annual plans?
Annual billing commits for a full year, so we reduce or waive the once-off setup fee as an incentive. Monthly plans keep a modest setup fee to cover real baseline work and discourage abuse. Toggle Annual on the pricing table to see the fee for each plan.
Do you offer refunds if we are not satisfied?
We handle refunds on a case-by-case basis. Contact support within 14 days of payment and we'll review your situation.
Can I upgrade or downgrade my plan at any time?
Yes. You can upgrade immediately or downgrade after expiry of the current subscription through your account dashboard.
How long does implementation typically take?
After DNS reporting is pointed at DMARC Shield, aggregate data and portal status typically begin appearing within about two days (mailbox providers control report cadence). Domain summaries are emailed on your plan schedule (monthly; weekly technical on Business+).
Do you offer custom pricing for enterprise?
Yes. Enterprise is quoted for larger organisations needing custom capacity, SLA options when agreed in writing, and dedicated support. Contact us to discuss your needs.
What is Fix Assist and how is it different from a subscription?
Fix Assist is a once-off cleanup project — not a subscription. We review your DNS, guide SPF/DKIM/DMARC fixes, verify the result, and hand over a summary. Choose it if you do not need ongoing monitoring or alerts. If you later subscribe, part of the Fix Assist fee can be credited toward onboarding.
Do you offer API access?
Yes. API key access is available on Shield Business and above. Generate and manage keys from your account dashboard.
What happens if my domain fails DMARC authentication?
Monitoring plans alert when posture slips and include clear next steps in email summaries and the portal. Managed+ adds DNS change guidance and support minutes; Fix Assist can run a once-off cleanup project.
Sales · Support · Partners
Talk to us about your domain
Tell us about your domain and we'll reply within 4 business hours with an assessment and recommendation — no obligation.
Message sent!
We’ll respond within 4 business hours.