DMARC360 FAQs

DMARC360 is CTM360's email security monitoring tool. It protects your domains from spoofing and impersonation by analyzing your DMARC, SPF and DKIM setup and showing who is sending email in your name.

Unless the right controls are in place, anyone can send an email that claims to come from your domain. DMARC360 shows whether those controls are set up correctly, who is sending mail in your name, and where the gaps are.

DMARC (Domain-based Message Authentication, Reporting and Conformance) is an email standard that lets domain owners tell receiving servers how to handle mail that fails authentication, and get reports on who is sending mail as their domain.

SPF (Sender Policy Framework) lists the servers allowed to send email for your domain. DKIM (DomainKeys Identified Mail) adds a digital signature that proves a message wasn't altered. DMARC builds on both.

Alignment means the domain a recipient sees in the From address matches the domain that passed SPF or DKIM. Without it, an attacker could pass a check with their own domain while displaying yours.

Without DMARC, or with a weak setup, anyone can send mail that appears to come from your domain. That makes phishing in your name easier and can also hurt delivery of your genuine emails.

DMARC360 checks your SPF, DKIM and DMARC records and reads the reports that mailbox providers send back. If someone is sending mail as your domain without permission, you'll see it, along with the setting that let it through.

Yes. Domains that never send email can still be spoofed. DMARC360 helps you lock down parked or unused domains too, so they can't be used against your brand.

No. DMARC360 never reads email content or needs access to mailboxes or mail servers. It works only from the authentication reports that receiving email providers generate automatically.

A clear view of who sends email as your domain, which senders are authorized, which fail authentication, and which configuration issues need fixing.

Spoofed email is one of the fastest ways to damage trust in a brand. DMARC360 spots unauthorized use of your domains, including ones you no longer use, so you can block impostors before customers receive mail that looks like yours.

A reject policy is the goal for most domains, but switching too early can block genuine email. DMARC360's sender visibility shows when every legitimate source is aligned and it's safe to tighten the policy.