Answers to the questions we hear most often about email authentication, how we work, and what to expect as a client.
We configure, manage, and monitor email authentication for your domain, specifically SPF, DKIM, and DMARC, so your business is protected against spoofing and impersonation, and your legitimate emails are more likely to land in the inbox instead of spam.
Small and mid-sized businesses that don't have an in-house IT team, especially ones that rely on third-party platforms like booking software, CRMs, or marketing tools to send email on their behalf. If you have a domain and send email, this applies to you.
Most businesses we work with haven't had an incident, and that's the point. Authentication is about closing the gap before it's exploited, not cleaning up after it already has been.
Essential covers SPF, DKIM, and DMARC configuration and moving your policy to full enforcement. Pro adds domain spoofing protection, authentication audits, and ongoing monitoring and reporting on top of that. Full details are on our Packages page.
We start by identifying every platform currently sending email on your domain's behalf, then review your existing DNS records. From there, we configure or correct your SPF and DKIM records, publish a DMARC policy starting in monitoring mode, and gradually move it toward full enforcement as we confirm all your legitimate senders are accounted for.
We need access to your DNS management platform, hosting provider, or registrar, or you can implement the specific record changes we provide yourself. Either approach works; we'll walk you through whichever is easier for your setup.
Publishing the initial records typically happens within the first few days of engagement. Moving your DMARC policy to full enforcement takes longer, usually a few weeks, since we do it gradually to avoid disrupting legitimate mail.
Our process is designed specifically to avoid that. We inventory every sending platform you use before making changes, and we move DMARC enforcement up gradually so we can catch and fix any missed sender before it's ever blocked.
On the Essential plan, your records are configured and you're on your own from there. On the Pro plan, we continue monitoring your DMARC reports, watching for new senders or issues, and sending you regular reporting so protection doesn't quietly drift over time.
It's a common source of misconfiguration if it isn't accounted for, since those platforms often send email as your domain. We factor booking and appointment platforms into our setup and audit process specifically so they don't get left out of your SPF and DMARC coverage.
Yes. We configure your authentication records around your existing sending platforms rather than asking you to change providers.
On the Pro plan, we catch new or unauthorized senders through ongoing monitoring. On the Essential plan, you'll want to let us know when you add a new sending platform so your SPF record can be updated to include it.
In some cases, parts of the Services may rely on a third-party hosted authentication platform, which is disclosed in our Terms & Conditions. We'll always be specific with you about what's being published and where it points.
No one honestly can. What proper SPF, DKIM, and DMARC configuration does is close the specific gap that lets someone spoof your exact domain, and give you visibility into attempts when they happen. It substantially reduces your exposure; it doesn't eliminate every form of email-based fraud, such as lookalike domains registered by someone else.
Proper authentication is one of the factors inbox providers weigh, and misconfigured or missing records can hurt deliverability. That said, deliverability is also affected by things outside our control, like your sending reputation history and the recipient's own filtering, so we can't promise a specific outcome.
Yes. Details on what we collect and how it's used are in our Privacy Policy.
Reach out through our Contact page or any "Talk to Our Sales Team" button on the site. We'll ask a few questions about your domain and how you send email, then recommend the plan that fits.
Yes. Our Services are delivered remotely through DNS access, so location isn't a limiting factor.
Yes. Many clients start with Essential to get properly authenticated, then move to Pro once they want ongoing monitoring and spoofing protection.
Reach out directly at [email protected] and we'll get back to you.
Tell us how your business sends email, and we'll help you figure out exactly what you need.
MDA Insights helps businesses lock down their email domains against spoofing, phishing, and impersonation with SPF, DKIM, and DMARC configured right the first time, and monitored so they stay that way.
2026 MDA Insights - All Rights Reserved.