Guides · Tools · Standards
Resources for email authentication
Setup guides, free checks, report reading, and standards — useful whether you manage one domain or many.
Browse by topic
Setup guides
DMARC, SPF, and DKIM DNS setup — step-by-step from monitoring to safer enforcement.
Free domain checks
Run DMARC, SPF, DKIM, BIMI, MTA-STS, TLS-RPT, and ARC readiness checks with no signup.
Documentation hub
One place for guides, free tools, standards, and product pages.
Read DMARC aggregate reports
Source, volume, disposition, and alignment — how to use rua reports without getting lost.
Read TLS-RPT reports
What is TLS-RPT, how to read aggregate TLS reports from Google and others, and which result-types to act on.
How to set up BIMI (CMC vs VMC)
Gmail accepts a VMC or CMC; p=none still blocks the logo. SVG Tiny PS, default._bimi PEM, and when to wait.
DMARC alignment (SPF / DKIM)
Why SPF or DKIM can pass and DMARC still fail — and how to fix brand-domain alignment.
DMARC enforcement path
Safe progression from p=none through quarantine to p=reject without breaking mail.
Enterprise-wide DMARC checklist
Inventory every brand, publish reports someone will read, then raise policy in stages across the estate.
Fix SPF permerror
Stay under the 10-lookup limit and clean includes without locking out legitimate senders.
Lookalike domains vs spoofing
DMARC stops exact-domain forgery. Lookalikes need different process and brand defences.
DMARC explained
What p=none vs p=reject means for South African domains and how spoofing risk shows up.
Standards & RFCs
Plain-language notes on the IETF standards DMARC Shield monitors.
BEC & brand risk
What to do when spoofing or business email compromise hits.
Many domains / teams
How security and IT run authentication across brands — start at For Teams.
DMARC reseller for MSPs
How MSPs and resellers run DMARC per client organisation — per-client billing, not one shared tenant.
MSP / partner programme
Platform-led partner portfolio for MSPs and resellers — enquiry only, not self-serve signup.
Latest from the blog
All posts →- DMARC Reseller: How MSPs Run Client Domains
- How to Set Up BIMI in 2026: CMC vs VMC for Gmail
- How to Read TLS-RPT Reports (Aggregate TLS from Google)
- Enterprise-wide DMARC Deployment Checklist
- DMARC Alignment Explained: Why SPF and DKIM Can Pass and Still Fail
- Unused Domains Still Get Spoofed: Multi-Domain Hygiene Most Teams Skip
- AI-Written Phishing Still Needs Your Domain: Why Authentication Matters More in 2026
- p=none Is Not Protection: Why “We Have DMARC” Still Leaves You Exposed