VaultFuzionVaultFuzionBY KAPARDYN
VaultDMARC · Email Authentication

Know exactly who sends email as your clients' domains.

Six authentication protocols monitored from a single dashboard — with sender-level visibility, a 0–100 authentication score per domain, and an AI copilot that turns raw DMARC reports into remediation steps.

Domain authentication
94/ 100 · client.co.za
SPF · DKIM · DMARC
Aligned across 12 sending sources
PASS
newsletter.esp-relay.net
4,210 messages · aligned
AUTHORISED
unknown source · 41.203.x.x
63 messages · spoof pattern
FLAGGED
Policy
p=quarantine → reject path
GUIDED
Six protocols, one dashboard

The full authentication stack — not just DMARC.

SPF
Sender Policy Framework

Which servers may send for the domain — validated on every report.

DKIM
DomainKeys Identified Mail

Cryptographic signing alignment tracked per sending source.

DMARC
Domain-based Message Auth

Aggregate + forensic reports processed with sender-level visibility.

BIMI
Brand Indicators

Logo-in-inbox readiness checks once enforcement is reached.

MTA-STS
Strict Transport Security

Downgrade-attack protection for inbound mail transport.

TLS-RPT
TLS Reporting

Delivery and encryption failure reports, decoded and trended.

From raw XML reports to decisions a technician can act on.

Reporting intelligence

Aggregate and forensic reports, decoded.

Every report lands in one pipeline and comes out as sender-level truth.

  • DMARC aggregate and forensic report processing with per-source visibility.
  • Authentication scoring engine: 0–100 per domain, per sending source.
  • Portfolio-wide domain overview for MSP-level reporting across all tenants.
Sending sources
Microsoft 365
18,204 msgs · SPF+DKIM aligned
98
CRM transactional
6,410 msgs · DKIM aligned
91
Marketing ESP
4,210 msgs · SPF aligned
74
Unknown relay
63 msgs · no alignment
12
Spoofing detection

Catch impersonation campaigns statistically.

Spoofers reveal themselves in the alignment data long before a user reports anything.

  • Spoofing campaign detection through statistical analysis of source alignments.
  • New-source and volume-shift surfacing across the whole domain portfolio.
  • Per-source drill-down so the failing relay is identified, not guessed.
Campaign watch
lookalike burst
41.203.x.x · 63 msgs in 2h
CAMPAIGN
alignment failure spike
+380% vs 30-day baseline
ANOMALY
affected domain
client.co.za · p=quarantine
CONTAINED
AI copilot

Policy guidance in plain language.

A natural-language assistant grounded in the tenant's own reports.

  • Ask why a source is failing and get the specific SPF/DKIM fix, not a generic article.
  • Guided policy progression toward enforcement, at the pace the data supports.
  • Remediation answers grounded in the domain’s own aggregate history.
Copilot
Why is the marketing ESP failing DMARC for client.co.za?
The ESP signs with its own DKIM domain, so alignment fails. Add the ESP's DKIM CNAME records for client.co.za, then re-check alignment before tightening the policy.
6
Authentication protocols covered
0–100
Score per domain, per source
2
Report types processed — aggregate + forensic
All
Tenants on one portfolio view
AI
Copilot for policy & remediation
Pricing

Per tenant, not per mailbox.

DMARC Monitoring is $10.00/tenant/mo. The full VaultDMARC Bundle — monitoring plus the AI Copilot — is $30.00/tenant/mo, and comes bundled from the Pro-Heavy tier.

FAQ

Frequently asked questions.

All six email authentication protocols — SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT — for every domain you enrol. Aggregate and forensic DMARC reports are processed continuously and scored per domain and per sending source.

Free viewers show you XML. VaultDMARC scores every sending source 0–100, detects spoofing campaigns statistically, rolls every tenant into one MSP portfolio view, and includes an AI copilot that answers policy and remediation questions grounded in the domain’s own reports.

No — per tenant. DMARC Monitoring is $10.00/tenant/mo and the full bundle with the AI Copilot is $30.00/tenant/mo. From the Pro-Heavy tier the bundle is included at no extra charge.

Put a score on every domain you manage.

Enrol a domain, and the first aggregate reports start scoring within a day.