Email Security Switzerland

Email Security & DMARC Monitoring

Is someone sending spam using your domain? Without DMARC monitoring you'll never know. I set up SPF, DKIM and DMARC, monitor your reports and show you who is abusing your domain.

  • Set up SPF, DKIM & DMARC correctly.
  • 16+ years of experience
  • Ongoing Monitoring
  • Based in Switzerland

Check email security

Free – results in seconds

No data is stored. Purely technical DNS check.

The Problem

Do you know who is sending emails on behalf of your domain?

Domain Spoofing

Attackers send spam and phishing emails using your domain as the sender. Your customers receive fake invoices or links – and think they come from you.

Emails land in spam

Without correct SPF, DKIM and DMARC records, Gmail, Outlook & Co. flag your genuine emails as suspicious. Important messages never arrive.

No visibility

Without DMARC reports you don't know if someone is abusing your domain. You only find out when customers complain – or your domain lands on a blacklist.

Complicated DNS records

SPF, DKIM, DMARC – it sounds technical, and it is. Misconfigured, you block your own emails. Configured correctly, you're protected.

The Solution

Email authentication – your shield against spoofing

Three DNS records protect your domain: SPF defines who may send. DKIM signs every email cryptographically. DMARC tells recipients what to do with forged emails.

SPF – Who may send?

An SPF record lists all servers authorised to send emails on behalf of your domain. Everything else is rejected.

DKIM – Is the email genuine?

DKIM adds a cryptographic signature to every outgoing email. The recipient can verify whether the email was altered in transit.

DMARC – What happens to forgeries?

DMARC combines SPF and DKIM and defines a policy: should forged emails be delivered, moved to spam, or rejected? And you receive reports about it.

DMARC Monitoring

Who is sending emails with your domain?

DMARC reports show you exactly which servers are sending emails on behalf of your domain – legitimately or not. Without monitoring, these reports go unread.

_dmarc.deine-domain.ch TXT

"v=DMARC1; p=none; pct=100; rua=mailto:[email protected]; sp=none; aspf=r;"

Gmail
Outlook
Yahoo
Analyse & Report

How the monitoring works

You add my report address to your DMARC record. I receive and analyse the daily reports from all major email providers (Google, Microsoft, Yahoo etc.) and notify you of any anomalies.

  • Set DMARC record – with my address as report recipient (rua)
  • Collect reports – all major providers send daily reports
  • Analysis & evaluation – I check who is sending on behalf of your domain
  • Monthly report – you receive a clear, easy-to-understand summary
  • Recommendations – I tell you what needs to be adjusted

Services

What I take care of for you

SPF setup

Identify all legitimate sending servers (hosting, newsletter tool, CRM etc.) and configure the DNS correctly.

DKIM configuration

Set up cryptographic signatures for outgoing emails – at your hosting provider and all sending services.

DMARC policy

Gradually move from p=none through p=quarantine to p=reject – without blocking your genuine emails.

DMARC monitoring

Ongoing monitoring of DMARC reports. You'll know immediately if someone abuses your domain for spam.

Blacklist check

Regular checks whether your domain or IP is on spam blacklists – plus help with delisting.

Monthly reports

Clear summary: who sent emails, what was blocked, what needs adjusting.

Comparison

Why professional email monitoring?

Many ignore DMARC reports or haven't set them up at all. Free tools only show the current state – no monitoring, no actionable recommendations.

WebAufbau Service DIYNothing configured
SPF correctFully verifiedOften incompleteUsually missing
DKIM activeAll servicesPartialNot present
DMARC policyUp to p=rejectOften only p=noneNot present
Ongoing monitoringYes, ongoingManual, rarelyNo
Clear reportsMonthlyRaw XML dataNo
Actionable recommendationsYes, specificNoNo
Blacklist monitoringYesManualNo

Looking for website protection too?

DDoS defence, bot filtering and login protection – GDPR-compliant with European servers.

The Process

Secure email domain in 4 steps

1

Email check

I check your domain for SPF, DKIM and DMARC – free of charge. You'll see immediately where the gaps are.

2

Setup

Configure SPF, DKIM and DMARC correctly. Register all sending services. Activate DMARC monitoring.

3

Observe

First weeks with p=none: collect reports, analyse, identify legitimate sources.

4

Enforce

Gradually tighten the policy to p=reject. Your domain is protected, forged emails are rejected.

FAQ

Frequently asked questions about email security

What is DMARC and why do I need it?

DMARC (Domain-based Message Authentication, Reporting & Conformance) prevents third parties from sending emails on behalf of your domain. Without DMARC, anyone can send forged emails with your address as the sender – for example phishing emails to your customers.

My emails land in spam – does DMARC help?

Yes. Correctly configured SPF, DKIM and DMARC records signal to email providers that your emails are genuine. This dramatically improves deliverability – especially with Gmail, Outlook and Yahoo.

What are DMARC reports?

Major email providers (Google, Microsoft, Yahoo etc.) send daily XML reports to the address specified in the DMARC record. These reports show: which servers sent emails on behalf of your domain, whether SPF/DKIM passed, and whether emails were rejected.

Could I block my own emails?

That's why we start with p=none (observe only). Only once all legitimate sources are registered do we gradually tighten to p=quarantine and then p=reject. This way you never block your own emails.

Do I need to change my hosting or email provider?

No. SPF, DKIM and DMARC are configured via DNS records. Your existing hosting and email setup remain unchanged. You just need access to your DNS settings.

What does it cost?

The initial email check is free. For the full setup and ongoing DMARC monitoring I'll provide a tailored quote. No subscription lock-in, cancel monthly.

I use various sending services (newsletter, CRM etc.) – is that supported?

Yes, that's exactly what this service is for. I register all legitimate sending sources (hosting, Mailchimp, HubSpot, Brevo etc.) in the SPF record and set up DKIM for each service.

How do I find out if my domain is being abused?

Through DMARC monitoring. I analyse the daily reports and notify you immediately if suspicious activity occurs – for example sending attempts from unknown servers.

Is someone sending spam using your domain?

Find out – with a free email check. I'll verify SPF, DKIM and DMARC and show you where you're vulnerable.