Reports nobody reads
Google, Microsoft, and Yahoo each send a report every day. They arrive as attachments and pile up unread.
DMARC reports, read for you
Find out when your domain is safe to move to p=reject
Your domain gets a daily pile of DMARC reports that nobody reads. Reject Ready reads them from Gmail, shows which senders pass and which fail, and tells you when it is safe to block spoofed mail.
No Gmail? You can send reports to your own report address instead. Free for one domain.
Most domains are stuck at p=none
A DMARC record at p=none only watches. It stops nothing, and the reports it produces are zipped XML. Meanwhile Google and Yahoo (since February 2024) and Microsoft (since May 2025) require DMARC from bulk senders, and a spoofed message from your domain still reaches inboxes.
Moving to reject feels like a gamble
Your newsletter tool, CRM, or helpdesk might send as your domain without passing alignment. Tighten the policy too early and their mail disappears.
Sender rules keep getting stricter
Failing authentication now costs deliverability, not just security. You need to know which senders are not aligned.
How it works
From sign-in to your first readiness result takes a few minutes. No DNS change is needed with Gmail.
- Sign in with Google and connect Gmail
Reject Ready searches for DMARC report emails only and reads the report attachments. It never reads other mail. See exactly what is read.
- Your domains and senders appear
Reports are parsed, checked against the reporting provider, and grouped by sending source with the service behind each one, such as Google, Amazon SES, or Mailchimp.
- Fix what fails, then tighten the policy
Each failing source comes with one sentence on what to change. When the numbers are good, Reject Ready shows the next record to publish.
No Gmail? Use your report address: add token@rua.rejectready.com to your DMARC record and reports arrive there.
What you see
One health view per domain, built to answer a single question: is it safe to move to the next policy?
Sources that fail
Every IP and service that sent mail as your domain, how much, and whether SPF or DKIM aligned. Forwarders and mailing lists are labeled so they do not scare you.
A grade for each domain
A to F from your policy, pass rate, and DNS: DMARC tags, SPF lookup count, DKIM keys, and MX.
Readiness for p=quarantine and p=reject
A plain yes or no with the reasons, and the exact record to publish next when the answer is yes.
Example
acme.example
Policy p=none, last 30 days
| Source | Messages | Result |
|---|---|---|
| Google Workspace | 4,210 | Aligned |
| Amazon SES | 1,180 | Aligned |
| Mailchimp | 640 | Fix DKIM |
Not ready for quarantine. Mailchimp mail fails DKIM alignment. Publish its DKIM record, then check again.
Pricing
Start free with one domain. Pro adds alerts, the weekly digest, longer history, and Gmail connect, with a 14-day trial that needs a card. Cancel any time from Billing.
Free
$0 forever
- 1 domain
- Gmail connect once Google verifies the app
- 30 days of history
- Report address, health dashboard, DNS checker
Pro
$19 a month
- 10 domains
- 3 Gmail mailboxes, synced hourly
- 13 months of history
- Report address, health dashboard, DNS checker
- Alerts for new failing senders, pass-rate drops, and record changes
- Weekly digest
- CSV export and raw XML download
- 14-day free trial, card required
Agency
$49 a month
- 100 domains
- 10 Gmail mailboxes, synced hourly
- 25 months of history
- Report address, health dashboard, DNS checker
- Alerts for new failing senders, pass-rate drops, and record changes
- Weekly digest, one per client
- CSV export and raw XML download
- Group domains by client
Frequently asked questions
What are DMARC reports?
When a domain publishes a DMARC record with an rua address, mailbox providers such as Google, Microsoft, and Yahoo send a daily zipped XML report to that address. Each report lists the servers that sent mail as your domain and whether that mail passed SPF and DKIM alignment. They are accurate and almost unreadable, which is why most domains never look at them.
What does Reject Ready read in Gmail?
Only DMARC report emails. It runs one fixed search for messages with a report-style subject and a .xml, .gz, or .zip attachment, then reads the sender, subject, date, authentication headers (Authentication-Results and ARC), and those attachments. It never reads other mail or any message text. The exact query is on the Gmail page, and you can disconnect at any time.
What if I do not use Gmail?
Every account gets a report address of the form token@rua.rejectready.com. Add it to the rua tag of your _dmarc record and reports arrive there directly. It works with any mailbox, and it is the better route when the mailbox belongs to a client or a shared inbox.
How does Reject Ready decide a domain is ready for p=reject?
It looks only at reports it can verify came from the reporting provider, and it leaves known forwarders out of the count. A domain is ready for quarantine when at least 98 percent of the mail from known senders passed for 14 days with no sender left to fix, and ready for reject on the same test over 30 days. It also needs at least 500 messages from at least two reporters in that window. Each result lists the reasons in plain sentences.
How long is my data kept?
Parsed reports and their raw attachments are kept for 25 months. Gmail message ids, used only to avoid importing a report twice, are kept for 60 days. You can delete everything from Settings at any time, including the Gmail connection and the stored reports.
How does the free trial work, and how do I cancel?
Pro starts with a 14-day trial that needs a card and includes Gmail connect. Cancel from Billing at any time: you keep the plan until the end of the period you paid for, and a trial cancelled in time is not charged. There is no contract.
Does the free DMARC check need an account?
No. Enter a domain on the check page and you get a grade for its DMARC record, SPF record and lookup count, and MX records, with one sentence on what to fix for each issue. It is limited to 20 checks an hour per visitor.
Who is Reject Ready for?
Small businesses that send mail through a handful of services such as Google Workspace, a CRM, a newsletter tool, and a store, and the agencies and IT providers that run email for them. The Agency plan groups domains by client and sends a digest per client.
Stop guessing before you set p=reject
Connect Gmail and your first reports appear within minutes. Free for one domain.