dmarcMAXEverything you need to run DMARC at scale
From a single internal domain to thousands of client domains under one MSP roof.
Tenancy & RBAC
Provider → client tenant hierarchy, data isolation at the database layer, and five roles with separation of duties between record changes and approvals.
Onboarding & intake
Capture the intake record, auto-discover SPF/DKIM/DMARC, inventory sending sources, and compute prerequisite readiness.
Record management
Generate valid records for any stage (DMARCbis t/np/sp aware, no pct dependency), validate, version, and one-click rollback.
Report ingestion
Poll a dedicated mailbox, parse compressed aggregate XML, dedupe, and route each report to the right tenant and domain.
Analytics & readiness
Pass rate over time, volume by source, alignment gaps, and an enforcement-readiness indicator that feeds the gates.
Approval workflow
Fixed stages with configurable gates: evidence, named approver, decision, and rollback — all audited.
Alerting
New unrecognised sender, dropping pass rate, DNS drift, expiring report authorization, and gates awaiting approval.
Client reporting & exports
Per-tenant branded reports and CSV/JSON exports with full gate/audit history as compliance evidence.