See who sends as you. Fix it. Enforce it.
FlashFortify turns raw DMARC reports into clear actions, then keeps watch so your protection doesn't quietly drift.
Your email traffic at a glance
Daily DMARC aggregate reports from Google, Microsoft, Yahoo and other providers are collected automatically and combined into one view.
- DMARC pass rate and volume over 7, 30 or 90 days, or a year
- Pass and fail trends charted by day, with a table view of the data
- Every report kept and viewable down to the individual record
- Issues highlighted automatically, with links to the detail
Sending sources
Every server sending as your domain, grouped into four categories:
| Compliant | DMARC pass rate of 95% or more |
| Needs attention | A known service that isn't set up for your domain yet |
| Partially passing | An unrecognised source that sometimes passes |
| Suspicious | An unrecognised source where nothing passes: likely spoofing |
Know when it's safe to tighten
Moving to p=reject too early blocks your own email, and leaving it too late leaves you exposed. FlashFortify's readiness score is based on at least 14 days of data, your legitimate pass rate and any known services that are still failing.
- A clear stage: monitoring, partial quarantine, quarantine, reject
- What's blocking the next step, in plain English
- The exact DMARC record to publish next, ready to copy
Every email security record, checked live
A weighted health score from live DNS checks, with each finding explained. The same checks are available as a lookup tool for any domain.
DMARC
Policy, subdomain policy, percentage, alignment and reporting addresses.
SPF
The full include tree with a count of DNS lookups against the limit of 10, plus checks for void lookups, +all and deprecated mechanisms.
DKIM
Keys found for the selectors your mail actually uses, key strength (1024 vs 2048-bit), and revoked keys.
MX and MTA-STS
Inbound mail servers and your MTA-STS policy, which makes other servers use encryption when emailing you.
TLS-RPT
Whether you receive reports of encryption failures when other servers deliver to you.
BIMI
Whether your brand logo can be shown in supporting inboxes, and what's missing if not.
Alerts
Know straight away when something changes. Alerts arrive as one email digest per check, and you choose the severity that gets emailed.
- A new sending source failing DMARC, with a configurable threshold
- DMARC weakened or removed, SPF changed or set to +all, DKIM keys changed, MX changed
- A parked domain that stops resolving (it may have expired)
Team access
Give colleagues the right level of access, with sign-in protection you'd expect from a security product.
- Multi-factor authentication required for every user
- Owner, admin and viewer roles
- An activity log of sign-ins and changes
- Automatic sign-out after inactivity, and "sign out everywhere"
Got domains you don't send email from?
They're an easy target for spoofing. See how FlashFortify locks them down.