See who sends as you. Fix it. Enforce it.
FlashFortify turns raw DMARC reports into clear actions, then keeps watch so your protection doesn't quietly drift.
Your email traffic at a glance
Daily DMARC aggregate reports from Google, Microsoft, Yahoo and other providers are collected automatically and combined into one view.
- DMARC pass rate and volume over 7, 30 or 90 days, or a year
- Pass and fail trends charted by day, with a table view of the data
- Every report kept and viewable down to the individual record
- Issues highlighted automatically, named by the service that needs fixing
- Your pass rate counts your own sending: copies that failed only after a recipient forwarded them are shown apart
Your sending services
Mail is grouped by the service that sent it, not just the server that delivered it, and each one gets a plain-English verdict:
| Needs fixing | One of your services failing DMARC, with the reason and what to change |
| Spoofing | Servers that aren't yours sending failing mail as your domain |
| Failed after forwarding | Passed when you sent it, failed later when a recipient's gateway or forwarding rule passed it on: nothing to fix |
| OK | Passing DMARC |
Know when it's safe to tighten
Moving to p=reject too early blocks your own email, and leaving it too late leaves you exposed. FlashFortify's readiness score is based on at least 14 days of data, your legitimate pass rate and any known services that are still failing.
- A clear stage: monitoring, partial quarantine, quarantine, reject
- What's blocking the next step, in plain English
- The exact DMARC record to publish next, ready to copy
Every email security record, checked live
A weighted health score from live DNS checks, with each finding explained. The same checks are available as a lookup tool for any domain.
DMARC
Policy, subdomain policy, percentage, alignment and reporting addresses.
SPF
The full include tree with a count of DNS lookups against the limit of 10, plus checks for void lookups, +all and deprecated mechanisms.
DKIM
Keys found for the selectors your mail actually uses, key strength (1024 vs 2048-bit), and revoked keys.
MX and MTA-STS
Inbound mail servers and your MTA-STS policy, which makes other servers use encryption when emailing you.
TLS-RPT
Whether you receive reports of encryption failures when other servers deliver to you.
BIMI
Whether your brand logo can be shown in supporting inboxes, and what's missing if not.
Alerts
Know straight away when something changes. Alerts arrive as one email digest per check, and you choose the severity that gets emailed.
- A new sending source failing DMARC, with a configurable threshold
- DMARC weakened or removed, SPF changed or set to +all, DKIM keys changed, MX changed
- A parked domain that's expiring, has expired or stops resolving
- A new lookalike domain that looks like a risk
- Changes are checked against your domain's own name servers, so you aren't alerted by out-of-date caches
- Alerts grouped by severity, type and domain, so a busy week is easy to work through
Team access
Give colleagues the right level of access, with sign-in protection you'd expect from a security product.
- Invite colleagues from the portal: they get an email to set their password
- Multi-factor authentication required for every user
- Enterprise single sign-on with Microsoft Entra ID, Google Workspace, or any SAML 2.0 or OpenID Connect provider
- Owner, admin and viewer roles
- An activity log of sign-ins and changes
- Automatic sign-out after inactivity, and "sign out everywhere"
Beyond the domains you send from
Parked domains
Domains you don't send email from are an easy target for spoofing. FlashFortify checks they're locked down, still registered and not about to expire.
Lookalike domains
DMARC can't stop email from a domain that only looks like yours. FlashFortify finds them, scores the risk and alerts you to new ones.
Plans from £17.99 a month
Priced by domains, with no limits on email volume or users.