Stop people sending email as you
Anyone can send an email that says it's from your business. Every day, the big email providers send reports on who is sending email as you. The reports say whether each email passed their checks. Almost nobody reads them, because they arrive as zipped computer files. We read them for you and turn them into one page you can act on.
DMARC is a short setting on your domain name. It tells inboxes what to do with email that fails these checks, and where to send the reports. DMARC monitoring is us reading those reports for you.
What you get
- A private page for each domain. It shows how much email went out as you, what passed, what failed and who sent it. We name the service where we can, like Google, Microsoft 365, Proton, Mailchimp or SendGrid.
- A note from us when something new starts failing. A forgotten newsletter tool, or someone faking your email, shows up the same week.
- Which providers sent reports, and your current setting as they see it.
- Help to move, step by step, from "just watch" to "send fakes to spam" to "block fakes", without losing real email.
Opening soon
We're not taking sign-ups yet. Email us the domain you'd like watched and we'll write when it starts, with the price. You don't pay anything on this site.
Or write to hello@littlejamjar.com with "DMARC monitoring" in the subject. We keep your email only to tell you when it opens: see Legal & privacy.
How it will work
- You add our reporting address to your domain's settings. We send you the exact text, and keep anything that's already there.
- The reports come to us, are read on our own machine in the UK, and are stored where you can ask us for a copy.
- You look at your page whenever you like. We tell you about anything new that fails.
What we keep
- Waitlist
- Your email address and the domain you mention, to tell you when monitoring opens. Deleted when you ask, when you've started or said no, and in any case within 12 months.
- The reports
- The reports as they arrive: 90 days, then deleted.
- The figures
- The figures we take from them (sending address, counts, results): 13 months, so you can compare a year with the one before.
- Who sees it
- You, through a private link that search engines never list, and us when we work on it. Nobody else.
For your IT person
DMARC aggregate reports (RFC 7489, the rua reports: gzip or zip XML) are sent to [email protected]. Onboarding adds rua=mailto:[email protected] to your existing _dmarc TXT record, keeping your other tags; the external-destination authorisation record is already published for every domain. Reports are matched to you by the report's own policy_published domain. The page shows volume, DMARC, DKIM and SPF pass rates per source IP, first and last seen, and the published policy; sources are named from the providers' published SPF ranges, with reverse DNS as a fallback. The usual path is p=none, then p=quarantine, then p=reject. Raw messages are kept 90 days, parsed aggregates 13 months.
Talk to a person
These services are run by little jamjar in the UK. Email hello@littlejamjar.com. Replies within two working days.