Visible.Enforced.DMARC Reports.
DMARC Reports shows who sends in the name of your domains. DMARC Manager takes each domain to p=reject step by step and keeps the records correct afterwards.
Conbool DMARC: analyse reports and enforce the policy safely.
Two tiers in one interface. DMARC Reports collects and evaluates aggregate and forensic reports and is included in every suite. DMARC Manager takes over the ongoing work: staged enforcement, maintenance of DMARC and SPF, daily reconciliation.
Why DMARC reporting fails in many organizations
Reports come as XML
Aggregate reports are machine-readable XML files in ZIP or GZIP archives. Manual analysis from a mailbox is not practical.
External subprocessors
Classic DMARC tools process reports at third parties. This expands the data path and requires additional data processing agreements.
Incomplete analysis
Without continuous analysis, the move to p=quarantine or p=reject remains a risk. Legitimate mail streams may be blocked.
No early warning
Pass-rate drops and new sending sources signal phishing waves early, but go unnoticed without automatic analysis.
How Conbool DMARC works
Three steps, then the analysis runs without further effort.
Set the records
Conbool detects the DNS provider of the domain. If it supports Domain Connect, the records are set there after one confirmation; otherwise the wizard shows them for copying. Existing report addresses are kept.
Reports arrive
Receiving systems send their daily reports to a fixed report address per tenant. The reports are ingested and not delivered to a mailbox.
Analyse and enforce
Sending sources, pass rate and recommendations appear in the dashboard. The enforcement card shows whether the numbers support the next level.
Two tiers, one interface
Setup is included. DMARC Manager takes over what has to be done continuously afterwards.
DMARC Reports
- Collect and analyse aggregate and forensic reports
- Identify and classify sending sources
- Recommendations and alerts by email
- One-time setup of the records at the DNS provider
- Assessment of whether the next policy level is safe
DMARC Manager
- Staged enforcement: from p=none via p=quarantine to p=reject
- With automation: rollback as soon as delivery drops
- Delegation: enter once, we maintain DMARC and SPF
- Permitted senders and report address kept up to date
- Daily reconciliation of target and actual state, deviations shown at the domain
What DMARC Reports delivers
Included in every suite, for every verified domain.
Setup without manual work
Detection of the DNS provider, preview of all records and setup via Domain Connect where the provider supports it.
Charts and drilldowns
Pass-rate trend, top source IPs with geo, SPF/DKIM alignment matrix and per-domain drilldown.
Authentication analysis
SPF and DKIM are broken down per sending source, alignment issues are immediately visible.
Concrete recommendations
Rules from the SPF lookup limit to weak DKIM keys. Resolved findings close themselves.
Email alerts
Critical recommendations are sent automatically to the recipients configured in settings.
Forensic reports
Incoming forensic reports are captured with header details and analyzed.
Conbool DMARC compared with standalone DMARC tools
Four structural differences.
Reports at no extra charge
DMARC Reports is part of every suite, with no billing by report volume. DMARC Manager is available as an add-on to every suite and is billed per domain.
Data path stays in-house
Reports are ingested and analysed at Conbool. No additional processor is involved for DMARC.
Analysis and enforcement in one place
The same platform filters, signs and analyses. Findings from the reports take effect without switching tools.
GDPR-compliant
Data processing in the EU. Retention configurable. Fully integrated with Conbool RBAC and audit model.
FAQ
What are DMARC aggregate reports?
How are forensic reports processed?
What are the prerequisites?
Can an existing DMARC vendor run in parallel?
How long are reports stored?
Which role is required for access to DMARC Reports?
How does DMARC Manager differ from DMARC Reports?
When is a domain raised to the next level?
How is DMARC Manager licensed?
Related topics around DMARC
DMARC delivers its full effect together with authentication, spoofing and BEC protection.
DMARC E-Mail-Authentifizierung
SPF, DKIM und DMARC korrekt ausrichten — Schritt für Schritt zu p=reject.
Learn moreDMARC Record erstellen
Den DMARC-TXT-Record richtig aufbauen — alle Tags und der sichere Weg zu p=reject.
Learn moreDMARC-Monitoring
Berichte auswerten und sehen, wer im Namen der Domäne sendet.
Learn moreDMARC p=reject einführen
In Stufen von p=none zu p=reject, ohne echte Post zu verlieren.
Learn moreHosted DMARC und SPF
Einmal delegieren, Einträge dauerhaft pflegen lassen.
Learn moreEasyDMARC-Alternative
DMARC-Auswertung aus der EU, ohne US-Cloud und mit Aktivschutz.
Learn moredmarcian vs. EasyDMARC
Die gängigen DMARC-Tools im Vergleich — und wo Conbool DMARC steht.
Learn morePhishing- & Spoofing-Schutz
DMARC stoppt Domain-Spoofing — kombiniert mit aktiver Phishing-Abwehr.
Learn moreCEO-Fraud-Schutz
Gefälschte Absenderdomains bei BEC und CEO-Fraud zuverlässig blocken.
Learn moreDANE und TLSA
DNSSEC-verankerte Transportverschlüsselung als Ergänzung zur DMARC-Authentifizierung.
Learn moreMTA-STS
Erzwungene TLS-Verschlüsselung für den Transport, ergänzend zu SPF, DKIM und DMARC.
Learn moreTLS-RPT
Reporting über fehlgeschlagene TLS-Verbindungen, ergänzend zu MTA-STS und DANE.
Learn moreConbool MailGuard
Aktiver Inbound-Schutz, der DMARC-Erkenntnisse direkt durchsetzt.
Learn moreAutomate DMARC reporting professionally.
Create an account, set up the DMARC record and the first report appears in the dashboard within 24 hours.