Getting started

These guides take you from a new organization to your first report. Read them in order, or jump to the step you are on.

• Start monitoring your first domain

  Confirm your email, name your organization and add the domain you send email from. What the form accepts, and how many domains each plan covers.

• Publish your DMARC record

  The TXT record to add at _dmarc, what p=none does, how an existing DMARC record is kept, and the TLS-RPT record that goes beside it.

• Publish the records through Cloudflare

  Connect a Cloudflare API token and publish the DMARC and TLS-RPT records in one click. Which token to create, what publishing replaces, and each error.

• Verify that the domain is yours

  Why a domain waits for verification, the two records that prove it is yours, how often we look for them, and what verification turns on.

• When does the first report arrive?

  Mailbox providers report once a day, so the first DMARC report usually lands 24 to 48 hours after you publish. What to do meanwhile, and if none comes.

• Read the domain page in your first week

  Reports are coming in. What the domain page shows, why readiness waits for more reports, which alerts stay quiet in week one, and what to fix first.

Published 27 October 2026 · Checked 27 October 2026