Managed DMARC & Email Security Service for Small Businesses

A managed DMARC service sets up SPF, DKIM and DMARC for your domain, moves the policy step by step from monitoring to enforcement, and keeps reading the reports so legitimate mail is not blocked — without needing in-house DNS expertise. CyberOM offers managed email security for small businesses: DMARC Protection and email authentication with Sendmarc, and inbound email threat protection with Perception Point. DMARC Protection is a separately listed product; Email Threat Protection (Perception Point) is listed in SOC & Extended Response and Full Cyber Stack on the Packages page.

What is DMARC, and why does my business need it?

DMARC (Domain-based Message Authentication, Reporting & Conformance) publishes a policy telling receiving mail servers how to handle messages that do not pass aligned SPF or DKIM checks. Without an enforcing policy such as p=quarantine or p=reject, someone can send email that appears to come from your domain. A monitoring-only policy helps identify legitimate senders before you ask receivers to quarantine or reject failing mail. Since February 2024, Google has required bulk senders to Gmail to authenticate their email and publish a DMARC record; see Google's sender guidelines and the DMARC specification, RFC 7489.

What does a managed DMARC service actually do?

The table explains the category in general, not a list of promises about any particular plan.

DIY vs managed DMARC

Task	Doing it yourself	With a managed service
SPF, DKIM and DMARC DNS records	You write and publish the records	The provider prepares them and guides the DNS change
Finding systems that send mail for your domain	Manual inventory	Mapped from DMARC reports
Moving the policy from none to quarantine to reject	Manual, with a risk of disrupting legitimate mail	Staged after legitimate senders are confirmed
Reading aggregate (RUA) reports	Raw XML files	Reports are collected and interpreted
Ongoing monitoring	Someone must remember to review reports	Part of the service

CyberOM's DMARC protection uses Sendmarc. What is included is listed on the DMARC Protection product page, including implementation of SPF, DKIM and DMARC, aggregate report analysis, ongoing policy monitoring and guidance toward enforcement.

How does email threat protection differ from DMARC?

DMARC helps protect your own domain from being impersonated in messages sent to other people. Email threat protection at CyberOM uses Perception Point for mail arriving in users' inboxes, including phishing, malicious attachments and links, and business email compromise. Both layers address different directions of email risk; neither replaces the other. See Email Protection + App Security for the separately listed inbound service.

Two layers of email security

Layer	Protects against	Technology at CyberOM	Direction
DMARC enforcement	Spoofing of your domain	Sendmarc	Mail sent in your name
Email threat protection	Phishing, malicious attachments and links, business email compromise	Perception Point	Inbound mail

In the published packages, SOC & Extended Response lists Email Threat Protection (Perception Point), and Full Cyber Stack includes that tier. DMARC Protection is a separate product, not a stated package inclusion. Compare both on the Packages page.

Do I need SPF, DKIM and DMARC together?

SPF identifies mail servers authorized to send for a domain. DKIM adds a cryptographic signature that lets a receiver verify a message against a domain's published key. DMARC checks alignment with the visible From domain and specifies a policy: none (monitor), quarantine or reject. Enforcement depends on at least one aligned SPF or DKIM result; configuring all three helps you understand and control mail sent in your name. For an example of the problem, read Email spoofing and DMARC.

Which email platforms does this work with?

DMARC is published in DNS rather than tied to one inbox application. You need the ability to update your domain's DNS records and identify the systems that legitimately send email on its behalf. If your team uses Microsoft 365, see what its defaults do not cover. CyberOM's technology partners page explains Sendmarc and Perception Point, while how CyberOM works covers the managed-service process.

How can I check my domain now?

You can check your domain's exposure with CyberOM's free domain exposure check, or query the TXT record at _dmarc.yourdomain.com to see whether a DMARC policy is published. SPF and DKIM use their own DNS records; a DMARC record alone does not prove every legitimate sender is configured correctly. Review the FAQ if you are comparing next steps.

FAQ

For the listed services, read the DMARC product page and packages, then get started. For the wider managed-security context, see the SOC and MDR guide.