FAQs

We don't just give you data—we give you decisions. Most DMARC solutions flood you with technical reports and leave the hard parts to you. We provide clear, actionable steps written by humans who understand both security and business continuity. Our experts become an extension of your team, handling the complex parts so you can focus on your core business.

Choosing DMARC EXPERT over other services offers several compelling advantages:

1. Expert Recommendations: DMARC EXPERT offers direct access through its SaaS tool to expert recommendations from professionals with extensive technical knowledge in email messaging. This feature streamlines the DMARC deployment process across a wide range of domains, eliminating the need for complex spreadsheets.
2. Actionable Email Authentication Plans: Both DMARC PREMIUM and DMARC ENTERPRISE customers benefit from an expert-written action plan for email authentication with SPF and DKIM. This plan is available in the TASK MANAGER, enabling you to track the project's progress and assign tasks to specific owners based on the email sources they manage.
3. Advanced AI for Maintenance: For those maintaining DMARC on a large scale, our AI tools provide significant time and cost savings by detecting and alerting on abnormal email flow activities, such as unusually high volumes of DMARC failures, without the need for constant manual monitoring.
4. Cost-Effectiveness: Our services are more affordable compared to competitors like Proofpoint Email Fraud Defense and Valimail, offering excellent value for money.
5. Email Deliverability : Gain seamless access to your Google Postmaster data and configure spam alerts that trigger when the complaint rate exceeds 0.3%, ensuring optimal email performance and security.f
6. Comprehensive Protection with DETECT and DETECT PLUS: Beyond DMARC, we offer daily detection of lookalike domains (domains similar to yours and your contacts'), allowing you to block them automatically in M365 or through your security tools, using our connectors and threat intelligence feeds via TAXII server.f
7. Flexibility and Partnership: Our platform stands out for its flexibility; we do not automatically block service if you exceed the number of domains or the volume of DMARC reports specified in your agreement. Instead, we approach these situations as opportunities for partnership and negotiation at renewal.
8. Simplified DMARC Interface: DMARC Expert provides a simplified and centralized user interface, unlike competing solutions that can be burdened by complex multi-interface approaches. This unified design facilitates sharing, information management, and DMARC report analysis, making the user experience more intuitive. Additionally, the inclusion of tooltips and responsive email support enhances accessibility and efficiency.

These features combined make DMARC EXPERT a holistic, expert-driven choice for your email security needs, providing both technical superiority and strategic value.

The difference between DMARC PREMIUM and DMARC ENTERPRISE lies primarily in the level of service provided:

1) DMARC PREMIUM

• An annual action plan for email authentication with SPF and DKIM, drafted by an expert and made available in the "Task Manager" as a list of tasks to be completed.
• Two onboarding videoconferences to guide you through:
• Using the SaaS tool,
• Its configuration,
• Or addressing your questions regarding the action plan, your anti-spam measures (EOP, Proofpoint, IronPort, etc.) or email deliverability.

2) DMARC ENTERPRISE

DMARC ENTERPRISE includes all the services of DMARC PREMIUM, along with a fully managed service:

• Active monitoring of DMARC reports: Consultants review your DMARC reports and alert you in case of spoofing or when a legitimate email-sending system fails to authenticate properly using SPF/DKIM.
• Dedicated project management: Consultants oversee the authentication project for your email-sending sources.
• Dedicated consultant: An expert is assigned for the duration of the contract, offering:
• Personalized support,
• [Number to be determined] monthly one-hour videoconferences,
• Communication of action plans,
• Answers to technical questions,
• And skill transfer to strengthen your autonomy.
• Email deliverability analysis: Through Google Postmaster, consultants analyze the deliverability of your emails to ensure:
• Spam complaint rates remain below critical thresholds,
• SMTP servers support TLS encryption.

Who are these offers for?

• DMARC PREMIUM: This option is ideal for organizations primarily looking to analyze their DMARC reports. It suits entities that have already implemented DMARC in quarantine or reject modes, are seeking a cost-effective solution, or have sufficient in-house expertise to manage multiple domains independently.
• DMARC ENTERPRISE: This solution is designed for organizations that need a comprehensive service and in-depth expertise to secure their messaging and ensure compliance with DMARC standards. It is particularly suited to companies managing a large number of domains or lacking specialized in-house skills.

In summary, the key difference between these offers lies in the scope of services provided and the level of support offered.

Here's an overview:

1. DMARC Record Configuration: The initial step involves configuring a DMARC record for the domain you wish to monitor. DMARC EXPERT provides the necessary DMARC record configuration details:

• Hostname: _dmarc.yourdomain.com
• Type: TXT
• Value: v=DMARC1; p=none; rua=mailto:client@dr.dmarc.fr; ruf=mailto:client@dr.dmarc.fr; fo=1;

This record needs to be added to your DNS settings to start collecting DMARC reports​​.

1. Access to the Tool: A few days after the DMARC record is in place and reports begin to be received, DMARC Expert gives access to its tool to designated individuals whose email addresses you provide.
2. Action Plan Development: Within the first 40 days of service, one of DMARC Expert's experts will draft an action plan for email authentication with SPF and DKIM. This plan will be available in the "Task Manager" section of the platform as a TO-DO list.

These steps lay the foundation for a successful DMARC implementation, enabling enhanced email security and domain protection. DMARC EXPERT's service includes ongoing support and monitoring, with the complexity of the service depending on whether you choose the DMARC PREMIUM or DMARC ENTERPRISE package.

The cost of DMARC PREMIUM starts at 1,260€ per year. This pricing is competitive with other offerings in the market, but DMARC PREMIUM uniquely provides access not only to a DMARC report analysis tool but also to an annual email authentication action plan with SPF and DKIM, authored by an expert and available in the "Task Manager" tab as a to-do list. For a quote and a 30-minute demo, you can contact DMARC Expert through their website. https://www.dmarc-expert.com/ask-for-demo-or-poc

DMARC ENTERPRISE starts at 5,500€ per year. The final price depends on the level of service you need, such as how many webinars with an expert are required each month. The cost also varies based on your progress in deploying DMARC across your domains, specifically whether you are looking to enforce DMARC in "quarantine" or "reject" mode for your domains or to maintain your DMARC policy because you have already implemented DMARC in a restrictive mode. To discuss a tailor-made offer, you are encouraged to contact DMARC EXPERT directly.

If your organization exceeds the anticipated volume of emails or the number of domain names under the DMARC EXPERT service plan, the platform is designed to accommodate these overages without any immediate automatic blocking or additional charges. DMARC EXPERT emphasizes flexibility in its service offerings, understanding that email volumes and domain management needs can fluctuate.

Should these overages become significant, DMARC EXPERT addresses them during contract renewal negotiations. This approach ensures that any necessary adjustments to your service plan are made to better align with your organization's evolving needs, maintaining a partnership-oriented relationship. DMARC EXPERT aims to work closely with its clients to adapt services as necessary, ensuring that your email security and authentication needs are continuously met without disruption.

This policy underscores DMARC EXPERT's commitment to serving as a partner to its clients, rather than strictly enforcing rigid service limits, providing a more tailored and flexible service experience.

DMARC Expert offers comprehensive services to combat phishing and similar domain attacks, focusing on the detection and prevention of malicious activities:

1. DETECT : This service is designed to identify domain names that are visually or phonetically similar to yours, a technique commonly used by attackers to deceive email recipients. DMARC EXPERT actively monitors for such "lookalike" domains and alerts you when potential threats are detected. This proactive surveillance helps you anticipate and block identity spoofing attempts, significantly reducing the risk of phishing attacks.
2. Automatic Blocking: Beyond detection, DMARC EXPERT enables you to automatically block these lookalike domains in Microsoft 365 (M365) or your security tools. This is facilitated through connectors and a threat intelligence feed using STIXX format via a TAXII server, allowing for seamless integration into your existing security infrastructure.
3. Email Authentication with DMARC: Implementing DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a core strategy in fighting phishing. DMARC helps ensure that emails purportedly from your domain are authenticated through SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) standards. This authentication process helps to prevent unauthorized use of your domain in email communications, thereby mitigating phishing attempts.
4. Continuous Monitoring and Alerts: Through the use of AI and machine learning, DMARC Expert is capable of detecting abnormal email sending patterns that may indicate phishing attempts or domain misuse. This includes detecting unexpected volumes of emails failing DMARC checks, or changes in email sources that could suggest malicious activity.
5. On-Demand Takedown Service: In the event that fraudulent domains or phishing attempts are identified, DMARC EXPERT can take immediate action to neutralize these threats. This includes blacklisting and domain takedown efforts, leveraging a global network of cybersecurity entities and trusted partners to address threats swiftly.

By integrating these services, DMARC EXPERT not only helps in the early detection of phishing and similar domain attacks but also provides tools and support to prevent them effectively. This comprehensive approach ensures your domain's integrity and enhances your overall email security posture.

DMARC EXPERT, through its affiliate Oppidum Security, implements robust measures for data privacy and the security of personal data, aligning with the General Data Protection Regulation (GDPR) guidelines. Here's an overview of the practices for ensuring data privacy and security, including the handling of RUF (Report URI for Forensic reports) and RUA (Report URI for Aggregate reports):

1. Compliance with GDPR: Oppidum Security processes and secures personal data in strict adherence to GDPR requirements. The collection and utilization of personal data are confined to providing targeted services and offering solutions tailored to the clients' demands​​.
2. Rights of Individuals under GDPR: Individuals have several rights under GDPR, such as accessing, correcting, erasing their personal data, restricting its processing, obtaining data in a commonly used and machine-readable format, and objecting to data processing. Oppidum Security respects these rights and facilitates individuals' ability to exercise them​​.
3. Safeguarding Data: Initiatives are in place to ensure prompt responses to requests regarding personal data, safeguarding personal data adequately and securely. Data is handled confidentially and not disclosed to third parties without explicit consent, except as required by law or by a legal authority​​.
4. Policy Adjustments: Oppidum Security maintains the right to update its GDPR policy to reflect changes in legal, regulatory frameworks, and data processing activities. Any significant policy adjustments are communicated through the website and directly to clients by email or another suitable method​​.
5. Non-Disclosure Agreements (NDAs): For corporate clients with confidentiality concerns, DMARC EXPERT accepts NDAs, offering an additional layer of legal protection for the data shared during the service engagement​​.
6. Handling of RUF and RUA Reports: In the context of DMARC, RUA reports, which are aggregate reports providing information on the overall email traffic including both compliant and non-compliant emails, do not typically contain specific personal data, hence posing minimal privacy risks. On the other hand, RUF reports, which offer detailed forensic data on emails failing DMARC checks, may contain personal information. To mitigate privacy concerns, Oppidum Security opts for a cautious approach, potentially omitting the collection of RUF reports or encrypting such data to ensure privacy and compliance with data protection regulations. This reflects a commitment to both deploying and maintaining DMARC effectively while prioritizing data privacy and security​​. (more info here)

These practices underscore DMARC EXPERT and Oppidum Security's commitment to data privacy and security, incorporating careful handling of both RUF and RUA reports to align with GDPR and client privacy expectations.

Yes, the DMARC EXPERT solution can deliver threat alerts and indicators via email, threat intelligence feeds, or direct integration with APIs. For instance, it can automatically block malicious domains across various security solutions, such as Cisco IronPort, Exchange Online Protection, Windows Defender, and Cisco Umbrella. With API access, it enables seamless transmission of critical information to detect and neutralize identified threats in real-time.

The DMARC EXPERT solution leverages advanced filters and machine learning algorithms to detect and reduce false positives and negatives, ensuring high accuracy in threat analysis. Non-relevant alerts can be muted to streamline notifications and reduce noise.

Yes, the DMARC EXPERT solution provides options to automate specific incident responses, such as blocking malicious domains within existing security solutions. For instance, it can automatically block threats across platforms like Cisco IronPort, Exchange Online Protection, Windows Defender, and Cisco Umbrella. With API integration, it delivers real-time information needed to detect and neutralize identified threats.

The DMARC EXPERT solution is designed for seamless deployment, even in complex infrastructures. Tailored for organizations that send high volumes of emails across multiple systems and domains, it leverages task automation and AI to identify legitimate sources and guide the configuration of email authentication protocols like SPF, DKIM, and DMARC. The solution is optimized to simplify and streamline email authentication projects, making it efficient and user-friendly for large enterprises.

The DMARC EXPERT solution features a quick learning curve, supported by an intuitive interface and comprehensive educational resources. Each subscription includes training sessions with a dedicated expert to help identify key actions required for the successful implementation of SPF, DKIM, and DMARC protocols.

The DMARC EXPERT solution stores data in either France or Quebec, depending on preference, with advanced encryption measures. It adheres to stringent security standards to prevent unauthorized access, including multi-factor authentication (MFA), Single Sign-On (SSO), secure software development lifecycle (SDLC), and regular vulnerability scans.

Yes, the DMARC EXPERT solution offers access to security experts for prioritized management of critical incidents, such as successful phishing attacks, forensic investigations, and incident response.

The reports generated by DMARC EXPERT are designed to be accessible to all users, with clear visual charts and straightforward language. Additionally, a task-tracking and commenting system allows for the inclusion of specific details related to the usage of email-sending solutions. The DMARC EXPERT solution also serves as a real-time map of email traffic flows.

Yes, the DMARC EXPERT solution incorporates advanced analytics and artificial intelligence tools to detect and mitigate potential threats. For instance, it can identify frequently communicated organizations and block phishing attempts from attackers using domains that closely resemble those of the organization or its contacts.