One mailbox, every domain
Point every monitored domain’s DMARC record at a single shared mailbox. dotMARC polls it, parses aggregate reports, and attributes them back to the right domain automatically.
Built for MSPs
Fine-grained, per-domain access control means you can grant an external client visibility into just their own domains — scoped Viewer roles, not an all-or-nothing login.
Self-hosted, your data
Runs on your own infrastructure — Docker Compose or Azure Container Apps — backed by PostgreSQL. Aggregate report data never leaves your environment.
Everything you need to run DMARC monitoring yourself.
Automatic polling and parsing of DMARC aggregate (RUA) reports, deduplicated so a message is never processed twice.
Pass/fail rates, source breakdowns, and DNS record status across every monitored domain, filterable by Group and Tag.
Fine-grained permissions — roles, Group-scoped Viewer grants for external clients, and an Admin/Viewer preset out of the box.
Live DNS lookups confirm each monitored domain’s DMARC record is actually in place and pointed at the right mailbox.
Self-hosted, open source, ready to deploy.
Run it with Docker Compose in minutes, or deploy the included Bicep template to Azure Container Apps. The docs cover both paths end to end.