SPF, DMARC & DKIM posture
Live status for each authentication protocol, including policy alignment, RUA/RUF coverage, weak DKIM keys, and unauthorized external report destinations.
Network Thinking Solutions
Email Security Monitoring
One dashboard for authentication posture, SMTP TLS policy, DMARC reporting, DNS changes, domain expiration, and client-ready summaries across the companies you manage.
Check your domain
Run a free live check of email authentication and SMTP TLS, plus DNS and registrar details. Export a PNG or PDF report to share.
How the platform works
From live DNS checks to parsed DMARC XML, the workflow is built for MSPs who need both operational visibility and client reporting.
- 1
Add managed domains
Group domains by company, run an immediate posture check, and establish a baseline for SPF, DMARC, DKIM, DNS, and transport security.
- 2
Collect DMARC aggregate reports
Point RUA reporting to the platform inbox so provider XML is parsed, deduplicated, and available in dashboards and summary emails.
- 3
Review changes before mail breaks
Use scheduled checks, change history, alerts, and weekly summaries to catch misconfigurations, spoofing risk, and expiring registrations early.
Authentication & DNS posture
See whether each domain is configured correctly before spoofing, delivery, or transport issues show up in client inboxes.
MTA-STS & TLS-RPT
See whether SMTP TLS policy is none, testing (reporting), or enforce, plus TLS-RPT rua destinations and the mta-sts policy-host SSL certificate expiry.
MX, TXT & DNS records
See mail routing, supporting TXT records, and nameservers in one place when investigating a domain or validating a change.
Registrar & expiration dates
RDAP lookups surface registrar details and registration expiration, with warning status when a domain is close to expiring.
DMARC reporting & analytics
Go beyond record checks with aggregate report ingestion, sender analysis, and summary emails your clients can actually read.
DMARC aggregate reporting
Ingest, parse, and roll up DMARC XML from mailbox providers. Review compliant mail, forwarders, and suspicious traffic by domain, sender, and time range.
Raw DMARC XML archive
Browse received aggregate reports by day and domain when you need the original XML for audit, support, or deeper investigation.
Weekly & monthly summaries
Company-level email summaries explain DMARC trends, sending sources, and posture changes for clients who want reporting without logging in.
Security scores & overview trends
Portfolio-level KPIs, compliance trends, and per-domain scores help MSPs spot domains that need attention before mail starts failing.
Operations for managed service teams
Keep client domains current with scheduled checks, audit history, scoped access, and admin controls for reporting contacts.
Automated checks on your schedule
Business domains refresh every 4 hours; Personal domains once per day. SPF, DMARC, DKIM, DNS, transport security, and registration data update without manual polling.
Change history & DNS alerts
Every material record change is logged with before-and-after values. Optional email alerts notify your team when DNS posture shifts.
Multi-company MSP workspace
Separate client portfolios, assign viewer access by company, and keep personal or sales domains isolated from shared client data.
Admin console
Manage companies, reporting contacts, user access, alert settings, and email platform attribution from one operational control panel.
Why email authentication monitoring matters
Email remains the most common entry point for phishing and business email compromise. Without aligned SPF, DMARC, and DKIM records, a domain can be impersonated long before anyone notices a DNS change or a spike in failing mail.
DNS records change for many reasons: migrations, vendor updates, expired domains, or mistakes during a cutover. Manual spot checks miss those changes. Scheduled monitoring, change history, and DMARC aggregate reporting give you a continuous view instead of a one-time audit.
Email Security Monitor is designed for teams that manage many customer domains and need both technical depth and client-facing reporting in the same system.
Explore by use case
Learn how managed service teams use Email Security Monitor for DMARC reporting, SMTP TLS posture, and domain expiration visibility.
DMARC monitoring for MSPs
Multi-company aggregate reporting, client summary emails, DNS change alerts, and authentication posture checks in one workspace.
Domain expiration monitoring
RDAP-based registration expiry tracking with warning badges so client renewals happen before mail authentication breaks.
MTA-STS and TLS-RPT
Why SMTP TLS policy and failure reporting still matter when a mail security appliance already checks TLS on inbound mail.
Frequently asked questions
What does Email Security Monitor track?
The platform monitors SPF, DMARC, DKIM, MTA-STS, TLS-RPT, MX records, TXT records, DNS nameservers, registrar details, and domain registration expiration. It also ingests DMARC aggregate reports and turns them into dashboards, trends, and client summary emails.
How often are domains checked?
Managed domains are checked automatically every four hours. You can also run an on-demand check from Domain Monitoring whenever you need fresh DNS and RDAP results.
Who is this platform built for?
Email Security Monitor is built for Network Thinking Solutions administrators and client-facing users who manage email authentication for customer domains. MSP-style multi-company access keeps shared client monitoring separate from private personal domains.
Does it include DMARC reporting and not just DNS checks?
Yes. In addition to live DNS posture checks, the app stores DMARC aggregate XML, builds rollups by domain and sender, supports raw report review, and sends weekly and monthly company summaries based on received report data.
Can clients receive reports without logging in?
Yes. Reporting contacts can receive weekly or monthly email summaries with DMARC volume, compliance trends, and sending-source context. A public guide also explains how to read those summaries.
Is this built for MSPs managing many client domains?
Yes. Email Security Monitor supports multi-company workspaces so MSPs can separate client portfolios, assign viewer access by company, and keep personal or sales domains isolated from shared client monitoring.
Can I monitor domain expiration for all managed client domains?
Yes. RDAP lookups surface registrar details and registration expiration dates during scheduled checks. Domains approaching expiry are flagged with warning status in Domain Monitoring alongside SPF, DMARC, and DKIM posture.
Why monitor MTA-STS and TLS-RPT if we already use a mail security appliance?
An appliance can require TLS after mail reaches your edge. MTA-STS publishes a sender-visible policy for the public hop to your MX, and TLS-RPT reports certificate and STARTTLS failures on that hop. Both remain important even when a gateway already terminates TLS.
How does DMARC aggregate reporting work for multiple companies?
Each company has its own domain portfolio and reporting contacts. DMARC aggregate XML is ingested into rollups by domain and sender, and weekly or monthly summary emails are generated per company based on the reports received for that portfolio.
Ready to monitor client email authentication?
Sign in to review domain posture, DMARC reports, and change history, or read the public DMARC summary guide first.