DMARC Analytics Dashboard

Monitor and analyze your DMARC aggregate reports. Track email authentication performance, identify unauthorized sending sources, and prevent domain spoofing with comprehensive analytics and insights.

Upload DMARC Report

Upload DMARC aggregate reports (XML format) to analyze your email authentication performance.

Drag and drop XML file here, or

Supports .xml, .xml.gz files

How to Get DMARC Reports

  1. Add rua= tag to your DMARC record:v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
  2. Receiving servers will email XML reports daily to the address specified
  3. Download the XML files (may be compressed as .xml.gz)
  4. Upload them here or set up automatic forwarding

Automatic Report Ingestion

Forward DMARC reports automatically to our processing address:

dmarc+[your-user-id]@inboxreadycheck.com

Set up a mail filter to automatically forward reports from your rua= email address. We'll process them automatically and add them to your dashboard.

Loading DMARC analytics...

Alert Settings

Configure thresholds for automatic email alerts when DMARC issues are detected.

%
IPs

How Alert Monitoring Works

  • Checks run automatically daily for all accounts
  • Email alerts sent only for critical or warning-level issues
  • Monitors last 7 days of DMARC data
  • Requires minimum of 5 reports before alerting
  • Alerts include: low alignment, unknown IPs, auth failures

Understanding DMARC Analytics

What is DMARC Reporting?

DMARC (Domain-based Message Authentication, Reporting & Conformance) aggregate reports are XML files sent daily by receiving mail servers (Gmail, Yahoo, Outlook, etc.) to the address specified in your DMARC record's rua= tag. These reports contain detailed information about all emails sent from your domain, including authentication results and delivery disposition.

Key Metrics Explained

Alignment Rate

Percentage of messages where either DKIM or SPF passes AND aligns with the domain in the From: header. This is the most important metric - higher is better (target: 95%+).

DKIM Pass Rate

Percentage of messages that pass DKIM signature verification. This indicates your DKIM configuration is working correctly.

SPF Pass Rate

Percentage of messages that pass SPF authentication. If low, you may need to update your SPF record to include all legitimate sending sources.

Disposition

Action taken by receiving servers: none (monitoring only), quarantine (sent to spam), or reject (blocked completely). Shows real-world enforcement of your DMARC policy.

How to Use This Dashboard

  1. Upload DMARC Reports: Forward aggregate reports from your rua= email address to our parser, or upload XML files directly
  2. Monitor Alignment Rate: Keep this above 95% to ensure legitimate emails are properly authenticated
  3. Review Source IPs: Identify all sending sources and verify they're authorized. Unknown IPs may indicate spoofing attempts
  4. Check Failure Reasons: Understand why messages fail authentication and take corrective action
  5. Track Trends: Monitor changes over time to detect new issues or improvements
  6. Gradual Enforcement: Use insights to safely move from p=none → p=quarantine → p=reject

Common Issues and Solutions

  • Low Alignment Rate (<90%): Check that all legitimate sending sources have proper SPF and DKIM configured. Review failure reasons for specific issues.
  • Unknown Source IPs: Investigate unfamiliar IPs immediately - these could be unauthorized senders or spoofing attempts. Check if they're third-party services you forgot to authorize.
  • DKIM Passing but Not Aligned: The DKIM domain doesn't match your organizational domain. Ensure DKIM signatures use your domain, not your ESP's.
  • SPF Passing but Not Aligned: The Return-Path domain doesn't match your From: domain. Configure your ESP to use your domain in the envelope sender.
  • Both SPF and DKIM Failing: Critical issue - emails from this source are completely unauthenticated. Add the source to your SPF record and configure DKIM signing.

Setting Up DMARC Reporting

To receive aggregate reports, your DMARC record must include the rua= tag:

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Receiving mail servers will send daily XML reports to this address. You can then upload these reports to this dashboard for analysis.

Best Practices

  • Review your DMARC analytics at least weekly to catch issues early
  • Maintain an alignment rate above 95% before enforcing quarantine or reject policies
  • Document all authorized sending sources and their authentication methods
  • Set up alerts for new unauthorized source IPs appearing in reports
  • Keep historical data for at least 90 days to track long-term trends
  • Use the insights to gradually strengthen your DMARC policy
  • Investigate any sudden drops in alignment rate immediately