DMARC report intake
Scheduled aggregate report imports, backfills, duplicate protection, import history, and safe credential updates.
Self-hosted DMARC report analysis
DMARQ
Understand DMARC reports. Find failures. Fix them safely.
Import aggregate reports, identify every sending service, and turn SPF, DKIM, and DMARC alignment failures into prioritized remediation.
- Open source
- Self-hosted
- Report data stays with you
DMARC report analysis
See what your DMARC reports are telling you
Track authentication and alignment by domain, message volume, receiver, and sending source. Start with the failure that needs attention, then open the underlying evidence.
From DMARC XML to action
A focused DMARC analysis loop
DMARQ keeps the original report evidence available while guiding operators from intake to the next useful decision.
-
01
Import DMARC reports
Collect aggregate XML from Gmail, Microsoft 365, IMAP, uploaded XML or ZIP files, and supported webhook paths.
-
02
Analyze authentication
Group reports by domain and sending source, then inspect DMARC, SPF, and DKIM alignment with network, DNS, and history evidence.
-
03
Remediate failures
Review the prioritized finding, inspect exact DNS changes, and apply supported changes only after explicit approval.
Report evidence
Move from report volume to the sending source behind it
Open an aggregate report to see which messages passed, which failed, and which sending source needs investigation before policy enforcement.
- Aggregate XML normalized by reporting organization and date range
- SPF, DKIM, and DMARC alignment for every sending source
- Report-backed evidence retained behind every recommendation
Built for real operations
Useful depth, disclosed when you need it
Sender intelligence
Provider detection, alignment evidence, activity windows, network context, and reputation signals.
DNS safety
Lint records, preview exact changes, verify ownership, and keep provider writes approval-gated.
Report-backed mail health
Traffic-weighted grades, DMARC compliance trends, failure volume, evidence history, and clear follow-up.
Beyond aggregate DMARC
Redacted failure reports, SMTP TLS reports, MTA-STS, and passive DANE/TLSA guidance.
Deployment choice
Single-user Docker installs, authenticated Kubernetes deployments, and provider-managed tenants.
Why DMARQ
Control without losing clarity
Full visibility
Inspect DMARC reports, senders, DNS evidence, and history in your own environment. Your aggregate report data does not need to pass through a hosted DMARQ service.
Intelligence-driven
Turn DMARC aggregate XML into prioritized authentication findings and repair plans while retaining the source detail behind every recommendation.
Beautiful interface
Start with the next useful action, then reveal live insights and technical depth progressively when the decision needs them.
Self-hosted
Run the tested Docker image or deploy to Kubernetes, with documented configuration, release health, and operator-controlled integrations.
Start self-hosted
A documented Docker path, using the stable image
Bootstrap the environment, pull the tested release channel, and finish setup in the browser.
Terminal
git clone https://github.com/christianlouis/dmarq.git
cd dmarq
./scripts/bootstrap-docker-env.sh
docker compose pull
docker compose up -d --waitOpen http://localhost:8080
Try before you install
Explore the same workflows shown here
The main demo is a read-only, single-user installation with seeded reports and domains. A separate provider demo covers tenant and billing operations.