Email that reaches the inbox, and proof of who is sending as you.
Email Deliverability is an add-on for businesses whose website we build and host. We check your email records every day, read the reports Gmail, Microsoft and Yahoo send about your domain, name every service that sends mail as you, and move your domain to full protection only when the numbers say it is safe and you have approved it.
Why this matters now
The big mailbox providers stopped trusting domains that cannot prove who sends their mail. These are their published rules, not ours.
Gmail and Yahoo require it
Since February 2024, anyone sending more than 5,000 messages a day to Gmail or Yahoo must publish SPF, DKIM and a DMARC record, with the From address aligned to one of them. Every sender needs at least SPF or DKIM. Mail that falls short is slowed down or sent to spam.
Microsoft now rejects it outright
Since May 2025, Outlook.com, Hotmail and Live reject high-volume mail that fails SPF, DKIM and DMARC with error 550 5.7.15. Rejected, not sent to junk. The 5,000 count is per provider per day, so one newsletter blast can cross it.
Anyone can send as you
Without an enforced DMARC policy, a scammer can send fake invoices and payment requests that show your domain in the From line. Your customers see your name on the scam, and nobody tells you it happened.
Your leads arrive by email
Form notifications, quotes, booking confirmations and review requests all leave from your domain. When they land in spam, the customer thinks you never answered.
Records break quietly
Adding one new tool to your SPF record can push it past the limit of ten DNS lookups, and from then on receivers treat it as broken. Nobody gets an error message. Without daily checks you find out from a customer.
Your logo in the inbox
Once DMARC is enforced, BIMI lets supporting inboxes show your logo beside your messages. Gmail and Apple Mail also require a verified mark certificate, which we can help you get.
How it works
Done for you, start to finish. You approve the changes that matter; we do the rest.
- 1
We check your records every day
SPF, DKIM, DMARC and MX are read from live DNS daily, and the addresses that send your mail are checked against blocklists every week. A problem reaches our team, not a scary email in your inbox.
- 2
We point the reports at us
Gmail, Microsoft, Yahoo and other receivers send a daily report about every message that claimed to be from your domain. We add our reporting address to your DMARC record, beside any address you already use, never in place of it.
- 3
We name every sender
Each sending server is matched to the service behind it, such as Google Workspace, Microsoft 365, Mailchimp or your booking tool. Anything we cannot name is flagged for you to confirm as yours or not yours.
- 4
We fix what is broken
You get the exact record to publish, merged with what you already have. A domain may only have one SPF record, so we edit yours instead of adding a second one. When we manage your DNS, we make the change for you after you approve it.
- 5
We move you to full protection, safely
Only when every sender is accounted for and passing do we recommend quarantine, and reject after another 30 clean days. Each step needs your approval, and each can be rolled back.
- 6
We keep you there
New senders, failing records and drops in your pass rate are caught as they happen, and your monthly report shows what we saw and what we changed.
Everything it does
Some of this runs today and some is rolling out. Each item says which, so you know exactly what you are getting.
Daily record checks (live now)
Every record that decides whether your mail is trusted, read from live DNS every day.
- SPF, with the full include tree and the 10-lookup limit counted
- DKIM keys found and graded: key strength, test mode, revoked keys
- DMARC policy, reporting addresses and the permission records they need
- MX records, so we know where your mail is received
- MTA-STS, TLS-RPT and BIMI, when you publish them
Blocklist monitoring (live now)
We check the addresses that actually send your mail, not your mail provider's inbound servers.
- Sending addresses taken from your SPF record and, once reports arrive, from real mail
- Checked every week and on demand
- A list that does not answer is reported as not checked, never as clean
- Every listing named, with the reason the list gives
Record fixes (live now)
The exact records to publish for the services you use, checked before we hand them over.
- Your existing SPF record merged, never a second one added
- Our reporting address added to your DMARC, never replacing yours
- No recommendation while records conflict, until the conflict is fixed
- Setup notes for Google Workspace, Microsoft 365 and the common mail services
Alerts to our team (live now)
A failing record or a blocklist listing opens a task for our team the day we see it.
- One task per problem, updated as it changes, not an email every hour
- A check that could not run is never mistaken for a fix
- Your portal shows the current state of every record
DMARC report reading (rolling out)
The daily aggregate reports mailbox providers send, read and summed for you.
- Reports from Google, Microsoft, Yahoo and every other receiver that sends them
- Your DMARC pass rate by day, counted the way receivers count it
- Which receivers are reporting, so "no data" never looks like "no mail"
- Reports read for counts and results only; they never contain message content
Sender inventory (rolling out)
Every service sending as your domain, named and sorted.
- Matched to the service behind it, such as Google Workspace, Mailchimp or SendGrid
- Unknown senders flagged for you to confirm
- Mark a sender as yours or not yours, and the rules follow your answer
Smart alerts (rolling out)
Changes in your real mail, not just your records.
- A new, unknown sender using your domain
- A drop in your DMARC pass rate week over week
- A sudden spike in volume
- Reports that stop arriving, so silence is never mistaken for health
Monthly report (rolling out)
An email authentication section in the monthly report you already get from us.
- Messages seen and the DMARC pass rate for the month
- Unrecognised senders and what we did about them
- Your current policy and the date it last changed
- Measured numbers only, never a made-up score
Guided path to full protection (coming next)
From monitoring, to quarantine, to reject, with your approval at every step.
- A readiness score built from 30 days of your real mail
- Your written approval recorded before any enforcing change
- Rollback any time, recorded like every other change
One-click publishing (coming next)
When we manage your DNS, an approved record goes live without you logging in anywhere.
- A before-and-after view of every change
- Every change logged, with who approved it
Premium blocklist data (coming next)
Commercial Spamhaus data and more lists, including lists that track domains as well as addresses.
- Spamhaus commercial data feed
- Domain blocklists in addition to address lists
On the roadmap
Where the service goes after that.
- Lookalike domain watch: registrations that imitate your name
- Email header analyzer for "why did this land in spam?" questions
- DKIM key rotation tracking
- Encrypted delivery testing for domains that run their own mail server
What is included and what the add-on adds
Every website we build and host gets the basics. The add-on is for businesses that want their domain fully protected and watched.
Included with every website plan
Email Health, at no extra cost.
- Daily SPF, DKIM, DMARC and MX checks
- Weekly blocklist check of your sending addresses
- The record generator in your client portal
- Our team alerted when a record breaks
- Your records' status in your portal
Email Deliverability add-on
Everything included, plus:
- DMARC reports read and summed for you
- Every sender named, unknown senders flagged
- Alerts on new senders, pass-rate drops and silence
- The guided, approved path to quarantine and reject
- Our reporting address added beside yours, set up by us
- An email authentication section in your monthly report
What it costs
Available only to businesses whose website we build and host. Priced per domain. Prices shown before any bundle discount.
Email Health
$0 with your website plan
Daily record checks, weekly blocklist checks, the record generator and team alerts. Part of every website plan.
See website plansEmail Deliverability
$49/month per domain
Everything in Email Health, plus report reading, the sender inventory, smart alerts and the guided path to full protection. $149 one-time per domain covers publishing the records, pointing the reports at us and taking the domain through to reject.
Add it to your planWhy not just use a free checker?
Free checkers are useful, and we built one too. They answer one question, once. This is the service that keeps the answer right.
| Feature | A free online checker | Email Deliverability |
|---|---|---|
| How often your records are checked | Once, when you remember | Every day, automatically |
| What you get when something is wrong | A red mark | The exact fix, merged with your current records |
| DMARC reports | Not read | Read every day and summed for you |
| Who is sending as you | Unknown | Every sender named; unknown ones flagged |
| Moving to quarantine and reject | Up to you, and risky | Guided, measured and approved by you |
| Who notices a problem | You, eventually | Our team, the day it happens |
| DNS changes | You make them | We make them when we manage your DNS |
Questions, answered
Who can get this?
Businesses whose website we build and host. The service works because we already know your site, your forms and the tools that send mail for you, and because we can change your records safely. We do not sell it on its own.
I use Google Workspace or Microsoft 365. Do I still need it?
Yes. Google and Microsoft run your mailbox, but your domain's SPF, DKIM and DMARC records are yours to publish and keep right, and neither of them reads your DMARC reports or moves your policy for you.
Will this block my own email?
No. We stay in monitoring mode until every service that sends as you is accounted for and passing. Quarantine and reject each need your approval, and either can be rolled back.
What do you need from me?
Access to your DNS, or for us to manage it, and a list of the services that send email for your business. We find the rest in the reports.
I already use another DMARC service. What happens to it?
It keeps working. A DMARC record can send reports to more than one address, so we add ours beside the one you have. We never remove yours.
How long does it take to reach full protection?
It depends on how many services send as you. We need 30 days with every sender accounted for before recommending quarantine, then another 30 clean days before reject. A simple domain takes about two months.
Do you read my email?
No. DMARC aggregate reports contain counts, sending addresses and pass or fail results. They never contain the content of a message.
What happens if I cancel?
Your records stay yours and keep working. We remove our reporting address from your DMARC record so reports stop coming to us.
Still have questions? We are happy to walk through your domain with you.
Find out what receivers think of your domain
Talk to us about adding Email Deliverability to your website plan.