01 — The problem
Every tool sends as your domain.
Your CRM, help desk, marketing platform and invoicing tool all send email as your domain. Each needs authorising, and SPF breaks quietly once it passes 10 DNS lookups.
Without DMARC, anyone can spoof your domain, and you have no reports showing who is sending as you.
02 — What we build
What the engagement delivers.
Sender inventory
Every system sending as your domain found from DMARC reports and headers.
SPF within limits
One SPF record under the 10-lookup limit, flattened or restructured with subdomains where needed.
DKIM
2048-bit keys for every sender, with a rotation schedule.
DMARC progression
p=none with reporting, then quarantine at increasing percentages, then reject once legitimate senders all align.
Reputation
Marketing moved to a subdomain, Google Postmaster and Microsoft SNDS monitoring, and list hygiene for bulk sends.
03 — Configuration vs custom
What is set up, and what is written.
Configuration
- DNS records at your registrar or Cloudflare
- DKIM in each sending platform
- DMARC report collection
Custom development
- SPF flattening automation
- Report parsing and alerting
- BIMI logo and certificate setup
04 — Typical effort
What it usually takes.
Ranges from comparable projects. You get a fixed-scope quote after a 30-minute call.
05 — What you own
Yours at handover.
- DNS record register
- Sender inventory
- DMARC report dashboard
- Rotation calendar
FAQ
Questions about email deliverability.
What is the SPF 10-lookup limit?
SPF allows at most 10 DNS lookups when evaluating a record. Each include counts. Past 10, SPF fails and mail may be rejected.
Why not go straight to DMARC reject?
Legitimate senders you didn’t know about would be blocked. Reports during p=none reveal them first.
What do Google and Yahoo require?
Bulk senders must authenticate with SPF and DKIM, publish DMARC, keep spam rates low and support one-click unsubscribe.
Should marketing email use a subdomain?
Yes. It separates marketing reputation from the main domain used for quotes and invoices.
Next step
Start with a 30-minute call.
Tell us what you run today and where it breaks. You get a fixed-scope quote afterwards. We don’t publish rates, because the honest price depends on scope.
Enquire
Talk to us about Email deliverability: SPF, DKIM & DMARC.
We have started the message for you. Add what you run today and we will reply within one business day.