Read the domain page in your first week

On every plan

The domain page shows how much of your mail passes DMARC, who sends it and what needs fixing. In the first week, expect new sources to keep appearing, readiness to wait for more reports, and some alerts to stay quiet. Your first job is to fix the sources that need attention.

What the domain page shows

Once the first report has arrived, the domain page, its Home tab, shows from the top:

• Do next: what to do for the domain, most urgent first: sources whose mail mailbox providers refused or sent to spam, sources that look like someone sending as you, DNS problems, open alerts and sources that need attention. Each item links to where you act on it. When there is nothing to do, the card says when the next DNS check runs.
• When mailbox providers refused a service's mail or sent it to spam in the last 30 days, a card that says how many of its messages they stopped, how to fix the service, and which policy step to go back to while you do.
• The pass rate: the share of messages that passed DMARC in the window you choose. How many sources need attention is on the Sources page.
• A chart of the pass rate day by day.
• Your largest sources, each with its status and a sentence on what we see.
• The DNS card: how many of your records have a problem, a warning or nothing wrong, and when we last checked.
• The readiness card: where the domain stands against the rule for the next policy step.
• The subdomains found in reports, and the latest reports.

Sources and why they pass or fail

A source is a sending service we recognise by name, such as Mailchimp, or a group of addresses we could not name. Each source has a status: fine, needs attention, or unknown. Open the domain's Sources page and expand a row. Its Explanation says in one sentence why that source passes or fails DMARC, and what to change.

Sources keep appearing all week. Each mailbox provider reports only on the mail it received, so a service that sends once a week shows up once a week. A full picture takes one to two weeks.

Readiness waits for enough reports

Readiness tells you when the domain can move to a stricter policy. It needs reports on at least 7 days within the last 14 days before it judges anything. Until then it says there are not enough reports yet. From Pro up, you can change the rule.

Some alerts stay quiet in the first week

In a domain's first week of reports, every source is new. So for 7 days after the first report, we send no alerts about new sources, drops in the pass rate, TLS failures or forensic reports. Other alerts, such as a DNS error or a changed record, work from the start.

Your first jobs

1. Fix every source that needs attention. The source's explanation names the fix and, where we have one, links the playbook for that service. Playbooks lists every step-by-step guide.
2. When readiness says the domain is ready, step up the policy from p=none. How the DMARC policy works explains each step.

For the tasks that come next, read the how-to guides.

Published 27 October 2026 · Checked 27 October 2026