Skip to content
ScryMarc Software
trustedMARC Buy
Desktop DMARC Analysis

Drag in your DMARC reports.
Get answers.

Drop in your report files (zip, gz, or xml) and get a single interactive dashboard. Known senders identified by name, spoofing flagged, fixes recommended. No subscription, no third-party servers, no configuration.

Identify
who's sending as you
·
Understand
what's failing and why
·
Resolve
with confidence
Pricing: £39 or £149, once How it works
trustedmarc.co.uk: mail auth dashboard
Total Messages
124,847
DMARC Pass
121,203
DMARC Fail
3,644
Senders ID'd
8
IP / Sender Messages DMARC SPF DKIM
209.85.220.41
🔵 Google Workspace
87,442
Pass
Aligned
Aligned
149.72.100.5
🟢 SendGrid
24,108
Pass
Aligned
Aligned
198.51.100.42
❓ Unknown
3,644
Fail
Fail
Fail
54.240.27.22
🟠 Amazon SES
9,653
Partial
Aligned
None
Before trustedMARC
✗ Inbox full of compressed XML attachments you've never opened
✗ No idea if someone is spoofing your domain right now
✗ Afraid to tighten DMARC policy in case you break something
✗ Shadow IT sending as your domain, completely invisible
✗ Stuck on p=none with no clear path forward
→
After trustedMARC
✓ Known sending services identified by name: Google, SendGrid, Mailchimp and more
✓ Spoofing attempts flagged automatically: country, IP, volume, failure rate
✓ Clear view of your sending sources, so you can fix auth gaps before you enforce
✓ Unknown senders surfaced immediately, so you can investigate or block with confidence
✓ Actionable recommendations: a clear, prioritised path to p=reject
A different approach
Unlike cloud-based DMARC tools, trustedMARC never touches your DNS or your report stream
Most cloud DMARC tools
✗Require you to change your DMARC rua= record to point reports at their servers, permanently
✗Your report data flows through their infrastructure indefinitely
✗Monthly or annual subscription, an ongoing cost
✗Per-domain pricing that scales against you as you add clients
trustedMARC
✓No DNS changes required, it works with your existing rua= address
✓All processing happens on your machine, nothing transmitted
✓One-time purchase, no recurring fees
✓Unlimited domains on the Professional licence, one price for all clients
£39
bought once, no subscription
$2.7bn
lost to business email compromise in 2022 (FBI IC3)
30+
sending services identified automatically
100%
local processing, your data stays yours
Automatically identifies senders from
🔵 Google Workspace · 🔷 Microsoft 365 · 🟠 Amazon SES · 🟢 SendGrid · 🟡 Mailchimp · 🟠 Mailgun · 🔴 Zoho Mail · 🟠 HubSpot · 🟢 Klaviyo · and 25+ more
Features
Everything you need to
understand your email security

Drop in your report files. Get a clear, actionable report. No configuration, no ongoing subscription to a third-party service.

Sender identification

Automatically identifies Google Workspace, Microsoft 365, SendGrid, Amazon SES, Mailchimp, and 30+ others by name, not just IP address.

Spoofing detection

Flags suspicious IPs with high failure rates, single-day spikes, and total DMARC failure, so you can see who's trying to send as your domain.

Timeline analysis

See pass and fail volumes day by day. Spot the moment something changed: a new sender, a config error, or an attack beginning.

Actionable recommendations

Prioritised, specific guidance, not generic advice. Tells you exactly which records to fix, which senders to configure, and what to do next.

Geolocation and reverse DNS

Every IP is mapped to a country, city, and ISP. Hostnames resolved automatically so you know exactly where traffic originates.

Live DNS record check

Fetches your actual SPF and DMARC records at report time. Immediately see if your DNS configuration matches what your traffic data shows.

All your domains, one report

Processes report files covering multiple domains in a single run. Every domain found in your DMARC reports is identified and reported on, with no configuration needed.

How it works
From inbox to insight
in minutes

No configuration required. No forwarding your reports to a third party. Just point it at your files.

01

Save your report files

Save the DMARC report attachments from your inbox into a folder. Mix of .zip, .gz and .xml all fine.

02

Select and run

Open the desktop app, select your folder, and click Generate Report. Progress shown in real time.

03

Review your dashboard

A full interactive HTML report opens in your browser: senders, charts, flags, recommendations and DNS records.

04

Act on the findings

Follow the prioritised recommendations to fix authentication gaps and move towards a p=reject policy.

Why people use it
Before you can fix your email security,
you need to see it clearly
🎭
Is someone impersonating you?
trustedMARC shows every IP sending email claiming to be from your domain, including ones you've never heard of. Spoofing attempts show up immediately as unknown senders with total DMARC failure.
👻
What's sending that you don't know about?
Marketing tools, CRMs, and automation platforms set up without IT's knowledge regularly appear in DMARC reports. Shadow IT sending as your domain is both a security risk and a deliverability problem.
🔧
Can you tighten security without breaking things?
Moving from p=none to p=reject without full visibility will block legitimate mail. trustedMARC shows exactly what you'd affect, so you can fix authentication gaps before you enforce, not after.
Who it's for
SMBs

Small and medium businesses

You get DMARC reports every day and they sit unread in your inbox. trustedMARC makes them understandable and actionable without needing to be an email security expert.

IT

IT managers and sysadmins

See exactly which services are sending as your domain, which are failing, and what needs fixing. Export to CSV for your records or share the HTML report with stakeholders.

MSPs

Managed service providers

Run DMARC analysis for all your clients from a single tool. Generate per-domain reports in seconds. No per-client seat fees, no uploading client data to external platforms.

Your data never leaves your machine

Most DMARC tools require you to redirect your reports to their servers permanently. trustedMARC processes everything locally. The only external calls are optional IP geolocation lookups and DNS queries, and nothing proprietary is transmitted. This matters for regulated industries, legal practices, financial services, and anyone handling sensitive communications.

Common questions
Quick answers
Does my data leave my machine?
No. trustedMARC processes everything locally. The only external calls are optional IP geolocation lookups and DNS queries, and both can be disabled. Your DMARC report files never leave your computer.
What operating systems are supported?
macOS and Windows. Both are included in every licence. The application runs as a native desktop app on both platforms with no browser or server required.
Do I need technical knowledge to use it?
No. Select your folder, click Generate Report, and read the dashboard. The Health tab explains what needs fixing in plain English. You don't need to understand DMARC, SPF, or DKIM to get value from the report.
Is this a subscription?
No. One-time payment. The software is yours with no renewal fees. Personal licences cover one machine, Professional licences cover ten machines and commercial use.
What file formats are supported?
.zip, .gz, and .xml, the three formats DMARC aggregate reports are delivered in. Drop them all into one folder, mixed formats are fine. Subfolders are scanned automatically.
What's your refund policy?
14 days, no questions asked. If trustedMARC is not right for you, contact support@trustedmarc.co.uk for a full refund.
Ongoing security
Not just a one-off fix, but a regular security habit
Your email environment changes constantly. New services get added, configurations drift, and threats emerge. trustedMARC gives you a clear, up-to-date picture of exactly which sources are sending as your domain, so you always know what's authorised, what's not, and you stay in control.
📅
Monthly check-in
Run a fresh report each month to catch new senders, detect configuration changes, and confirm nothing unexpected has appeared.
🔍
After any infrastructure change
Added a new email platform? Changed your ESP? Run trustedMARC to confirm the new sender is authenticating correctly before problems reach customers.
🛡️
Client reporting for MSPs
Generate a monthly DMARC health report for every client. A clear HTML file you can share directly or use as the basis for a security briefing.
✅
Confirm only known sources send
Use trustedMARC as an ongoing audit tool to ensure only authorised, authenticated services are sending as your domain at any given time.
⏱️
Automate with scheduled tasks
Run trustedMARC automatically on a schedule using Windows Task Scheduler or macOS cron. The same app supports both GUI and headless command-line modes, with no separate tools needed.
Get started
Ready to understand
your email security?

trustedMARC is currently available as a desktop application for macOS and Windows.

View pricing Get in touch

More from ScryMarc Software

Small, local-first desktop tools that each do one job properly. Bought once, no subscriptions.

INFOtemperCreates Microsoft 365 starters from role templates and puts anyone back in line with their role, with a way back.Coming soon licenSINGERFinds the Microsoft 365 licences you pay for and nobody uses.Coming soon RUFreaderOpens DMARC forensic reports and shows who sent what, from where, and why it failed. The other half of trustedMARC.Coming soon JSONstatusTurns Slack exports into redacted, Bates-stamped PDFs with an immutable redaction log.Available now