Skip to main content

DMARC Shield · Email authentication

Stop email spoofing
before it hits your customers

Continuous domain monitoring, clear next steps, and hands-on help when you need it — so invoices, logins, and support mail still come from you.

  • Free SPF, DKIM, and DMARC scan
  • Monthly status emailed to you
  • Hands-on fix help when needed

How it works

From first scan to ongoing protection

Three clear steps — so you stay in control of email authentication without living in DNS tickets.

01

See where you stand

We check your domain and show what is missing or weak — in plain language, not a raw dump.

02

Stay ahead of drift

Continuous monitoring watches DNS and authentication. When something slips, you get an alert.

03

Ship the fix

Clear next steps on every plan — with guided DNS changes and IT coordination when you need hands-on help.

Status you can act on

Monthly domain summaries by email — who sent as you, what passed or failed, and what to do next — with the same story in the portal when you want the detail.

DMARC Shield status view with pass/fail breakdown, sources, and next actions

Prefer ongoing monitoring?

Compare plans for scheduled checks, email summaries, alerts, and clear next steps — ZAR pricing, cancel anytime.

See Plans & Pricing →

Security & IT teams

Built for many domains

One place for multi-brand reporting, continuous DNS quality, and the capacity your organisation actually needs — without a spreadsheet of XML reports.

Compare team paths →

  • 01 Fast for distributed teams — portals and reporting stay snappy wherever your people work.
  • 02 Reporting that scales — high-volume authentication streams with sender and country context you can act on.
  • 03 DNS quality, continuously — multi-record checks and change awareness so drift surfaces early.
  • 04 Access for real teams — role-based members and programmes sized for security and IT.

What you get

Outcomes that protect your brand

Monitoring, alerts, and guidance that match how growing teams actually run email.

Monthly domain summary

Senders, pass/fail, and next actions by email on your plan cadence — leadership-ready, not raw XML.

Alerts when posture slips

Broken DNS, weakened policy, or monitoring gaps surface as alerts — before customers notice delivery problems.

Safe DMARC rollout

Move from monitoring toward enforcement with visibility into sender impact — so you progress with confidence.

Who sends as you

Surface systems using your domain — CRM, invoicing, marketing, forms — and keep authorised senders aligned.

DNS health checks

Core authentication records and advanced checks as your plan grows — plus free tools for one-off scans.

Work with your IT provider

Exact change guidance and coordination so DNS updates land safely — you stay in the loop without owning every detail.

What monitoring plans include

Concrete outputs, not buzzwords.

Monthly email summary
Who sent as your domain, what failed, and what to do next — in your inbox.
Drift alerts
When DNS or policy slips from a healthy baseline, we flag it.
Safe DMARC rollout
Managed+ guides a careful path from monitoring toward reject, with visibility into sender impact.
Clear ZAR pricing
Listed fees, month-to-month, cancel anytime. Onboarding shown upfront.

IETF open standards

Checked against the real standards

We watch the authentication records that protect your brand. If policy weakens, SPF softens, or transport security slips — you hear about it early.

DMARC

RFC 7489

Policy that tells receivers what to do when mail fails authentication — and gives you the reports to act on.

p=reject rua/ruf

SPF

RFC 7208

Who is allowed to send as your domain — so spoofed mail fails the first gate.

-all / ~all 10-lookup

DKIM

RFC 6376

Cryptographic proof that mail from your domain was not altered in transit.

_domainkey selector

TLS-RPT

RFC 8460

Visibility into TLS delivery failures on the path to your domain — problems you would otherwise never see.

_smtp._tls JSON reports

MTA-STS

RFC 8461

Require encrypted delivery to your domain so attackers cannot downgrade the transport path.

enforce _mta-sts

BIMI

IETF Draft

Brand logo readiness after enforcement — we scan and guide the DNS path (logo display still depends on providers).

default._bimi VMC

ARC

RFC 8617

Authentication continuity through forwarding — so legitimate mail survives modern filters.

ARC-Seal chain

Why email security matters

Email spoofing still costs businesses billions a year. One forged message can redirect payments, break customer trust, and damage a brand for a long time.

90%

of cyberattacks against businesses start with a spoofed or phishing email

80%

of domains with DMARC records are still misconfigured or left in monitoring-only mode

p=reject

is the only DMARC policy that actually blocks spoofed email — and most domains never reach it

Built by S-Tech Solutions

S-Tech Solutions is a South African Cyber Security company focused on cloud infrastructure, email security, and managed services.

We built DMARC Shield so South African businesses can move from first scan to a safer policy — continuous monitoring, clear next steps, and hands-on help when you need it.

Industry data · Year on year

The threat is real and growing

Email fraud still costs businesses billions. Latest figures from law enforcement, the anti-phishing industry body, and large-scale platform telemetry — with year-on-year change where published.

$3.05B
+10% YoY

Up from $2.77B in 2024

U.S. business email compromise losses reported to the FBI in 2025

FBI IC3 2025 Internet Crime Report →
$20.9B
+26% YoY

Up from $16.6B in 2024

Total internet crime losses reported to IC3 in 2025 — a new high

FBI IC3 2025 Internet Crime Report →
3.8M
+1% YoY

Up slightly from 3.76M in 2024

Phishing attacks observed worldwide across calendar 2025

APWG Phishing Activity Trends Q4 2025 →
5B
Platform scale

Microsoft security operations, mid-2024–mid-2025 period

Emails screened per day on average for malware and phishing (Microsoft telemetry)

Microsoft Digital Defense Report 2025 →
28%
Initial access

Top observed entry path in reactive IR cases

Of Microsoft Incident Response engagements started with phishing or social engineering

Microsoft Digital Defense Report 2025 (DART) →
4.5×
AI threat

~54% click-through vs ~12% for manual phishing (MDDR 2025)

Higher click likelihood on AI-assisted phishing vs traditional phishing (Microsoft research)

Microsoft Digital Defense Report 2025 →

Figures are third-party research and law-enforcement reports, not DMARC Shield product metrics. We cite public threat reports only — not DMARC product vendors. Open the original source for methodology.

Common questions

What payment methods do you accept?

We accept credit cards via PayFast and EFT for pre-approved enterprise customers. All pricing is in South African Rand (ZAR) with no hidden fees. Setup (onboarding) fees for subscription plans are shown on the pricing table and charged at signup.

Are there any hidden costs or additional fees?

No. Subscription prices, once-off initial setup, Fix Assist project fees, and optional extras (extra domains, parked domains, sender onboarding packs) are itemised before you pay.

What is included in initial setup and onboarding?

Every subscription includes once-off domain intake, DNS review, identification of email senders, reporting configuration, baseline summary, and portal setup. Managed+ adds DNS change guidance and safe policy progression. Fix Assist is a separate once-off remediation project if you want the fixes without a subscription.

Why is the onboarding fee lower (or free) on annual plans?

Annual billing commits for a full year, so we reduce or waive the once-off setup fee as an incentive. Monthly plans keep a modest setup fee to cover real baseline work and discourage abuse. Toggle Annual on the pricing table to see the fee for each plan.

Do you offer refunds if we are not satisfied?

We handle refunds on a case-by-case basis. Contact support within 14 days of payment and we'll review your situation.

Can I upgrade or downgrade my plan at any time?

Yes. You can upgrade immediately or downgrade after expiry of the current subscription through your account dashboard.

How long does implementation typically take?

After DNS reporting is pointed at DMARC Shield, aggregate data and portal status typically begin appearing within about two days (mailbox providers control report cadence). Domain summaries are emailed on your plan schedule (monthly; weekly technical on Business+).

Do you offer custom pricing for enterprise?

Yes. Enterprise is quoted for larger organisations needing custom capacity, SLA options when agreed in writing, and dedicated support. Contact us to discuss your needs.

What is Fix Assist and how is it different from a subscription?

Fix Assist is a once-off cleanup project — not a subscription. We review your DNS, guide SPF/DKIM/DMARC fixes, verify the result, and hand over a summary. Choose it if you do not need ongoing monitoring or alerts. If you later subscribe, part of the Fix Assist fee can be credited toward onboarding.

Do you offer API access?

Yes. API key access is available on Shield Business and above. Generate and manage keys from your account dashboard.

What happens if my domain fails DMARC authentication?

Monitoring plans alert when posture slips and include clear next steps in email summaries and the portal. Managed+ adds DNS change guidance and support minutes; Fix Assist can run a once-off cleanup project.

Sales · Support · Partners

Talk to us about your domain

Tell us about your domain and we'll reply within 4 business hours with an assessment and recommendation — no obligation.

I am interested in
Email Us Directly

Start with a free domain scan

See SPF, DKIM, and DMARC status in seconds. Self-serve plans add email summaries and alerts. Multi-domain programmes start with a conversation.