DMARC enforcement without blocking your mail | DomainCanary
Move your domain to p=reject a step at a time, and approve each step. With hosted DMARC, if a step blocks your own email, we put the previous policy back.
55
Partial
Agentic Readiness Score
+25 llms.txt
+15 structured API
missing +20 ai-plugin
Raise this score to 95+
We ship the 6-file GEO uplift as a pull request against your repo. Flat fee, turnaround under 72 hours.
communication
llms-txtapimcpemail
Agentic Signals
Found
ai-plugin.json
Not found
OpenAPI Spec
Not found
Structured API
Found
Not specified
Schema.org Markup
Found
MCP Server
Found
Embed this badge
Show off your agentic readiness — the badge auto-updates when your score changes.
llms.txt Content
# DomainCanary
> DomainCanary is a DMARC enforcement service that protects your domain from email spoofing without blocking your own mail. The free tools below check and edit SPF, DKIM and DMARC records with no account.
## Product
- [DMARC monitoring](https://domaincanary.com/dmarc-monitoring): We read the aggregate reports receivers already send about your domain, list every sender, and mail you the next change to make. Same-day alerts on paid plans.
- [Guided enforcement](https://domaincanary.com/guided-enforcement): Reach p=reject one small step at a time. We propose each step when your reports show it is safe, and you approve it before we publish it. With hosted DMARC, a step that blocks your own mail is reverted automatically.
- [Hosted DMARC](https://domaincanary.com/hosted-dmarc): We serve your DMARC record through a CNAME in your DNS, so you change the policy and roll it back from your dashboard.
- [Hosted SPF](https://domaincanary.com/hosted-spf): We serve your SPF record through an include in your DNS and re-resolve every sender's addresses hourly.
- [Hosted MTA-STS](https://domaincanary.com/hosted-mta-sts): Point two CNAMEs at us and we publish your MTA-STS record, serve the policy file and carry its certificate.
- [DNS cleanup](https://domaincanary.com/dns-cleanup): See which SPF senders still send mail, from 90 days of your reports, and check every DKIM key you sign with.
- [For MSPs and IT providers](https://domaincanary.com/msp): Add every client's domains from a CSV or the API, put each client in its own group, send each client a report under your own name, and move each domain to enforcement.
- [All features](https://domaincanary.com/product): Everything DomainCanary does, on one page.
- [Pricing](https://domaincanary.com/pricing): Your first domain is free and the free plan does not expire. Paid plans add domains, alerts, guided enforcement and hosted records.
- [About](https://domaincanary.com/about): Who runs DomainCanary and how to reach us.