DMARC Monitoring for MSPs
Manage email security across all your client domains from one dashboard. Monitor every protocol, catch issues before clients do, and prove the value of your services.
The Challenge
Managing email security across hundreds of client domains is a fundamentally different problem than managing one. The tools built for single organizations don't scale, and the gaps get wider as your client base grows.
You can't manually check SPF, DKIM, and DMARC across hundreds of client domains every day
Problems are discovered reactively, usually when a client reports bounced email or a phishing incident
Clients blame you when email stops working, even when the root cause is a DNS change they made themselves
There is no single pane of glass for email security across your entire client portfolio
Built for Multi-Domain Management
MailShield is built for teams that manage email security across many domains. Here's what's shipping today, and what we are building next for MSPs specifically.
Single Dashboard for All Client Domains
Add every client domain to one workspace. See security scores, protocol status, and issues at a glance without switching between accounts.
Per-Domain Security Scores
Each domain gets its own security score across all eight protocols. Prioritize remediation by score, spot regressions instantly, and report progress to clients.
Automated Protocol Checks
SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, DNSSEC, and DANE. All eight protocols monitored continuously for every domain, with no manual intervention.
Instant Alerts When Configurations Change
Get notified the moment a DNS record changes, a score drops, or an authentication failure spikes. Catch client-side mistakes before they cause outages.
Team Roles for Internal Staff
Owner, admin, and member roles let you give technicians the access they need across the workspace. Per-customer isolation and read-only customer logins are on the roadmap below.
Hosted MTA-STS
Enable MTA-STS for any client domain with two DNS records. MailShield hosts the policy and manages certificates, so there is no infrastructure overhead per client.
How MSPs Use MailShield
Three ways managed service providers integrate MailShield into their workflows.
Onboarding New Clients
Run a baseline audit the moment you take on a new client. Add their domain, get an instant security score, and document exactly what needs fixing. Use the report as the starting point for your remediation plan.
Ongoing Monitoring
Once domains are configured, MailShield monitors them around the clock. You get alerted when something changes instead of discovering problems when a client calls to complain about bounced email.
Upselling Email Security as a Service
Package DMARC monitoring and email security hardening as a managed service. The dashboard gives you the data to show clients what you are protecting them from, and the scores to prove the value over time.
Per-domain pricing that scales with you
One predictable rate per client domain. The more domains you manage, the less each one costs. Plug it straight into your client billing and resell at your own margin.
Want to try it first? The free tier covers 1 domain with all 8 protocol checks and DMARC report processing. No credit card required.
See full pricing & calculator →Starter band
domains 1-25
€4/ domain / mo
Growth band
domains 26-100
€3.20/ domain / mo
Scale band
domains 101+
€2.40/ domain / mo
Each domain is billed at the rate for the band it falls into. All paid features included: hosted MTA-STS, hosted BIMI, white-label customer reports, SSO, and more. Brand-protection domains can use the passive add-on at €1.50/dom/mo.
Start FreeWhat We Are Building Next for MSPs
Today MailShield groups domains by customer, breaks down cost per client, and sends each one a white-label report. These features are in active development to make it an even better MSP product. If any of them would tip your decision, we want to hear from you.
- In progress
Multi-organization account switcher
One login that switches between separate workspaces, one per client. Keeps each client's data isolated while you manage them all from a single account.
- On deck
Client read-only login
Invite your client to view their own domains in read-only mode. Useful for proving the work and keeping them informed without giving away the keys.
DMARC for MSPs FAQ
Is MailShield suitable for MSPs and MSSPs?
Yes. MailShield is built for managing email security across many client domains at once. You add every client domain to a single workspace and monitor all eight protocols (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, DNSSEC and DANE) from one dashboard, instead of logging into a separate tool per client.
Does MailShield support per-client billing for MSPs?
MailShield uses graduated per-domain pricing that gets cheaper as you add domains, so you can map each client domain to a line on your own invoice and resell at your margin. Group domains by customer, see a per-customer cost breakdown, and send each customer their own white-label report. A multi-organization account switcher is in active development.
Does MailShield give a multi-domain DMARC dashboard?
Yes. You get a single pane of glass across your entire client portfolio: a per-domain security score, live protocol status, and automatic DMARC and TLS-RPT report processing for every domain, with alerts the moment a record changes or a score drops.
How much does DMARC monitoring cost for an MSP?
Pricing is per client domain on a graduated rate: EUR 4 per domain per month (annual) for the first 25 domains, EUR 3.20 from 26 to 100, and EUR 2.40 from 101 up. Each domain is billed at the rate for the band it falls into, so a large portfolio lowers your blended cost. Parked brand-protection domains can use the passive add-on at a reduced rate.
Can my clients get branded reports and read-only access?
Branded per-customer PDF reports are available now: group a customer's domains, then download or schedule a white-label report that is sent to the customer's contact automatically. Customer read-only logins are on the near-term roadmap. We are signing up a small group of MSP design partners to shape what comes next, with free Business-tier access in return. Reach out through the contact form if you want to be involved.
Stop firefighting email issues
Add your first client domain in under a minute. Get a full security audit across all eight protocols, and start monitoring continuously.