You send business email from your own domain
If customers receive quotes, invoices, password resets, or support messages from your domain, impersonation can damage trust even when your inbox was never hacked.
Live on web and iOS
Know who sends email as your domain. Block the rest when it is safe.
DomainGuard turns DMARC reports into named senders, pass rates, spoofing clues, and the next DNS record to publish. It is built for business owners and lean IT teams that need a clear answer, not another XML file.
No credit card required. Monitor up to 3 domains on Starter.
Example DMARC view
example.com
Authentication pass rate
97.8%
Healthy
14-day observation window complete
Current policy
p=none
Recommended next record is ready to review.
p=quarantine; pct=25Sending sourceStatus
Microsoft 365Passing
SendGridReview DKIM
Unknown source · 198.51.100.24Investigate
Who needs it
If your domain sends email, its reputation is part of your business.
A forged invoice or password-reset message can look like it came from you. DMARC makes that abuse visible and gives receiving mail systems a policy to follow.
Several services send email for you
Microsoft 365, Google Workspace, CRMs, billing tools, newsletters, and website forms can all send as your domain. DomainGuard shows which ones authenticate correctly.
Your IT team is small
You need an answer, not another raw feed. DomainGuard ranks what needs attention and gives you a DNS change you can review with your provider.
You manage more than one domain
Agencies, MSPs, and growing companies can review several brands from one account instead of checking records and report files one at a time.
What you get
From the first report to an enforced policy.
DomainGuard connects the evidence, the risk, and the fix. You can see what changed and why the next action matters.
DMARC reports, already decoded
Aggregate reports arrive automatically. DomainGuard turns the XML into a readable view of sending volume, authentication results, and disposition.
Automatic email intake plus XML and gzip upload
Known and unknown senders
See Microsoft 365, Google Workspace, SendGrid, Mailgun, and other common providers by name. Unrecognized sources stay visible for review.
Sender-level pass and failure counts
A clear deliverability status
Each domain is labeled healthy, monitoring, at risk, or waiting for reports so you can find the domains that need attention first.
30-day pass-rate and source trends
Diagnostics that name the problem
Missing records, broken syntax, stale reports, failing known services, and suspicious IPs are ranked with the exact next action.
Specific fix guidance, not a generic score
A safer path to enforcement
DomainGuard watches the evidence before recommending a move from p=none. When the observation window and pass rate are ready, it gives you the next record to publish.
Two-week guardrail with a 95% pass threshold
The rest of your domain in one account
Check SPF, DKIM, DNS changes, SSL certificates, uptime, blacklist status, website security, vulnerabilities, and more from the same platform.
Web dashboard and iOS companion app
How it works
Start by watching. Enforce after the legitimate senders are clean.
Connect
Publish the reporting address
DomainGuard gives you a safe p=none record and a private report inbox. Add it at your DNS provider without changing how receiving mail systems handle your messages.
Understand
See every service using your domain
Reports begin arriving from mailbox providers. DomainGuard groups the traffic into recognized services, passing sources, failures, and senders that need investigation.
Protect
Enforce when the evidence supports it
Fix legitimate senders first. After a stable observation window, use the recommended record to move toward quarantine or rejection without guessing.
Questions before setup
DMARC without the jargon.
What is DMARC, in plain language?
DMARC is a DNS policy that tells receiving mail systems how to check messages claiming to come from your domain. It also sends reports back to you so you can see legitimate services, authentication failures, and possible impersonation.
Do I need DomainGuard if I use Microsoft 365 or Google Workspace?
Usually, yes. Your mailbox provider handles part of the setup, but it cannot automatically account for every CRM, newsletter platform, billing system, website, or vendor that sends as your domain. DMARC reporting is how you find and verify the whole list.
Will DomainGuard change my DNS automatically?
No. DomainGuard generates the record and explains the recommendation. You decide when to publish it at your DNS provider. That keeps policy changes reviewable and avoids blocking legitimate mail without your approval.
Can I start without blocking any email?
Yes. The recommended starting policy is p=none, which collects reports without asking receiving systems to quarantine or reject messages. You can correct legitimate senders before moving toward enforcement.
Is DomainGuard available now?
Yes. The DomainGuard web dashboard is available now at nhmohio.com, and the iOS companion app uses the same account. The free Starter plan covers up to three domains and does not require a credit card.
Start with visibility
Find out who is using your domain before someone else decides for you.
Create a free DomainGuard account, add up to three domains, and get the reporting record you need. If you want a second set of eyes, NHM Ohio can help with the DNS changes.