MX Pilot monitors your DKIM, SPF, and DMARC records, parses aggregate XML reports from every mail server, and tells you exactly who's sending email on your behalf — and whether it's passing.
Trusted by teams who take email security seriously
MX Pilot does the heavy lifting — fetching, parsing, and correlating every DMARC aggregate report automatically.
Enter any domain you control. MX Pilot immediately scans your SPF, DKIM selectors, and DMARC policy in real time.
Update your DMARC record's rua= tag to your MX Pilot reporting address. Mail servers start sending XML reports automatically.
Aggregate XML files from Google, Microsoft, Yahoo, and others are ingested, decompressed, and decoded every hour.
When a new sending source appears, a DKIM key expires, or SPF failures spike, you get notified before your deliverability tanks.
DMARC builds on SPF and DKIM to give receiving mail servers a clear policy for handling messages that fail authentication. MX Pilot visualizes every step.
Receiving servers look up your SPF record to confirm the sending server is authorized to send mail for your domain.
A cryptographic signature in the email header is verified against a public key published in your DNS — proving the message was not tampered with in transit.
If SPF or DKIM fails, your DMARC policy tells receiving servers whether to none, quarantine, or reject the message — and sends you an XML report.
From first-time DMARC setup to enterprise enforcement — MX Pilot has the tools your team needs.
MX Pilot automatically ingests DMARC RUA reports from Google, Microsoft, Yahoo, and hundreds of other mail providers — compressed ZIP or GZIP, no manual unpacking.
Automatically discovers all DKIM selectors sending on behalf of your domain, validates the keys, checks expiry, and flags any mismatches across your selectors.
Validates your SPF record for syntax errors, lookup limit violations, and unauthorized senders. Suggests flattened alternatives when you approach the 10-lookup limit.
Get instant email or Slack alerts when failure rates spike, a new unknown sender appears in your reports, a DKIM key expires, or your DMARC policy is misconfigured.
Identify unauthorized IP addresses impersonating your domain across aggregate reports. See exactly where unauthorized mail is originating and block it at the DMARC level.
Historical pass/fail/quarantine charts over time, per-source breakdowns, IP geolocation maps, and email volume trends — all in one clean dashboard.
Manage all your domains from a single pane. See health scores at a glance, drill into any domain for detailed analysis, and export reports per-domain or in aggregate.
Step-by-step guided wizard to move from p=none to p=reject safely, with real traffic analysis to ensure you won't block legitimate mail.
Full REST API for integrating DMARC data into your own dashboards, SIEM, or CI/CD pipeline. Webhooks for real-time event streaming to any endpoint.
Raw XML from mail servers is transformed into actionable data. See exactly what's passing, failing, and why.
Start free, upgrade when you need more. No hidden fees, no per-seat surprises. Powered by Stripe.
Perfect for personal projects and getting started with DMARC.
Get startedFor small teams and growing businesses taking email security seriously.
Start trial →For growing companies that need real-time visibility and enforcement guidance.
Start trial →For large organizations, agencies, and MSPs managing email at scale.
Contact sales →All paid plans include a 14-day free trial. No credit card required to start.
"We had no idea three unknown services were sending email as our domain. MX Pilot caught them within 24 hours of setup. Moved to p=reject with total confidence."
"The policy wizard is incredible. It showed us exactly which mail streams were failing alignment before we tightened our policy — saved us from a serious outage."
"We manage email for 40+ clients. MX Pilot's multi-domain view and white-label reports make it the only DMARC tool we recommend. The API integration with our MSP stack is flawless."
rua= DMARC tag. These reports contain detailed breakdowns of every IP that sent email claiming to be your domain, along with SPF and DKIM pass/fail results. MX Pilot collects and parses these automatically.rua= tag in your DMARC DNS record to point to your unique MX Pilot address, and we handle the rest. Reports start arriving within 24 hours as mail servers send their daily digests.p=none to collect data first, then upgrading to enforcement once your legitimate sources are confirmed.Start monitoring in 5 minutes. No credit card required.