DMARC · TLS-RPT · BIMI · SPF · MTA-STS
Know who's sending email as your domain.
Spoofhound turns the DMARC and TLS reports your domains already generate into a clear picture: who's sending legitimately, who's spoofing you, and exactly what to do next — all the way to full enforcement.
Invite-only beta · no card, no agents, nothing to install — just DNS.
Anyone can put your domain in the From line.
Until DMARC is enforced, receivers deliver mail that merely claims to be you. The reports that reveal this — DMARC aggregate, forensic, and SMTP TLS reports — arrive as zipped XML and JSON that nobody reads. Spoofhound reads them for you, every day, and only speaks up when something needs a decision.
What the reports reveal
- ✓ Legitimate senders passing authentication
- → Forwarders breaking SPF in transit (normal, explained)
- ✗ Unknown sources spoofing your domain right now
- ✗ Mail servers silently failing to negotiate TLS
Everything in one place
Monitoring that tells you what to do,
not just what happened.
Triage-first dashboard
Open to a queue of things needing attention — not a wall of charts. Every alarm ships with a runbook line: what it means and what to do about it.
Spoofing detection
New sending sources are baselined automatically; a brand-new IP failing alignment — the classic spoofing signature — pages you the same day.
Enforcement wizard
The codified path from p=none to p=reject: a 98% aligned-pass gate over a rolling window, plus an "all sources explained" check, with a staged recommendation.
TLS-RPT health scores
Every domain graded A–F on its mail-transport security: MTA-STS mode as receivers observed it, DANE evidence, and failure rates with severity tiers.
Hosted BIMI
Your logo in supporting inboxes: we validate it against the BIMI SVG profile, host it with your certificate, and hand you the exact DNS record to publish.
Alerts with a lifecycle
Alarm → reminder → resolved, with suppression so a known problem doesn't page you daily — plus a Monday digest of the week that actually reads well.
How it works
Live in three DNS records.
Verify your domain
Publish one TXT record to prove ownership. A domain belongs to exactly one account — always.
Point your reports at us
The Setup page shows your current DMARC and TLS-RPT records with Spoofhound appended — copy, paste, done. Runs happily alongside any existing report processor.
Get answers, not XML
Reports typically start within a day. Dashboards fill, alarms guard, and the wizard tells you when you're ready to enforce.
Already have history with another processor? Upload your old report emails and files — Spoofhound backfills months of data in minutes.
Stop guessing who sends as you.
Spoofhound is in invite-only beta. Tell us about your domains and we'll get back to you.
Request an invite