Managed DMARC

Managed DMARC for service providers

Help customers understand and improve their email-authentication posture without building the reporting and policy workflow from scratch. Vigil supports domain assessment, DMARC aggregate-report processing, source identification, SPF review, DKIM evidence review and guided policy progression.

Check a domain · Explore partner models

Built for teams that manage client domains

Vigil is designed for WISPs, MSPs, ISPs, hosting providers, security consultants and IT advisers that already help customers with DNS, email or security. Start with your own domain, establish a repeatable process, then decide how much of the customer relationship and technical work your team wants to own.

WISPs and ISPs

Add a domain-authentication workflow alongside the customer and DNS relationships you already manage.

MSPs and IT advisers

Assess and monitor multiple customer domains through a consistent delivery process.

Security consultants

Use authentication evidence and reports to guide remediation and policy decisions.

From assessment to enforcement

Assess

Review the domain’s published DMARC, SPF, DKIM and mail-routing signals.

Observe

Collect aggregate reports and identify legitimate and unfamiliar sending sources.

Remediate

Correct authentication gaps with the domain owner and relevant email providers.

Progress

Move policy carefully when report evidence shows that legitimate mail is aligned.

DMARC is not an inbound spam or malware filter. It validates authorised use of the visible From domain through SPF or DKIM alignment and lets a domain owner request handling for messages that fail. Receiving systems may still apply local policy.

What Vigil supports

DMARC monitoring

Process aggregate reports, identify sending sources and track authentication results over time.

SPF review

Assess records, lookup limits and optimisation options, including flattening support where appropriate.

DKIM guidance

Discover common selectors, review available evidence and guide provider-side validation and monitoring.

Policy progression

Use report evidence to support careful movement from monitoring towards enforcement.

Provider reporting

Give service-provider teams a consistent view of customer-domain status and next actions.

Choose the working relationship

Vigil offers three partner paths. Referral partners make an introduction and hand delivery to Vigil. Reseller partners retain the customer and billing relationship while working with Vigil on delivery. Self-service partners take more direct technical responsibility. Commercial terms are handled privately after a fit review.

Compare partner models · Talk to Vigil

Start with evidence

A public checker is a useful first view of DNS configuration; aggregate reports provide the evidence needed for ongoing management. Check a domain now, then use the guides to understand the result and plan the next step.

Use the free checker · Read the DMARC guide · Browse technical guides

FAQ

What does managed DMARC include?

It includes assessment, aggregate-report processing, source identification, authentication review, monitoring and support for careful policy progression. The exact delivery split depends on the partner model.

Does Vigil replace inbound email security?

No. DMARC addresses authorised use of an exact From domain. It does not inspect message content, remove malware, stop every phishing technique or replace an email gateway.

Can we start with our own domain?

Yes. Starting with your organisation’s domain is the preferred way to understand the workflow before introducing it to customers.

Do we need to choose a partner model before contacting Vigil?

No. Review the models, check a domain and contact Vigil with the context you have. The application can record “unsure” as the intended model.

Start with one domain

Run a public DNS check or talk to Vigil about a provider workflow for your organisation and customers.

Check a domain · Contact Vigil