DMARCDKIM.com vs Palisade in 2026
DMARCDKIM.com combines DMARC analytics, SPF and DKIM diagnostics, guided policy rollout, hosted MTA-STS, and an API/MCP layer. Palisade is agentic: its AI agent investigates senders, drafts authentication fixes, and proposes each enforcement step for your approval.
Our verdict: DMARCDKIM.com is a practical report-and-diagnostics platform with unusually broad public pricing: from a €4/month Mini plan to €440/month Enterprise, or €330/month equivalent billed annually, plus a separate MSP offer and free MCP lookup and SPF Merge tools after sign-in, with paid account-data access. Pick it when those tools, domain caps, and guided workflow fit. Pick Palisade when you want an AI agent to investigate every sender, prepare the fixes, and carry domains toward p=reject with your approval at every step.
Samuel Chenard · CEO & Co-Founder, PalisadeSource checks through 2026-10-1415-day full-product trial. Nothing is charged until it ends.
ChatGPT
Claude
Gemini
Perplexity
Grok
DMARCDKIM.com
Palisade
Provisional · 6/8 dimensions established
Average of established dimensions; may change as remaining dimensions are verified.
Full rubric · 8/8 dimensions established
Palisade's IT-team plans start at $19 a month, sized by email volume. Start with a 15-day full-product trial; nothing is charged until it ends.
Which one is right for you?
Best for Teams wanting dashboards, diagnostics, and guided rollout
Best for MSPs and IT teams responsible for multiple domains
- You want published euro pricing, from €4/month for two domains and 10,000 emails to €80/month for 120 domains and 5 million emails, or €60/month when billed annually.
- Your team wants DMARC dashboards, SPF X-ray, DKIM X-ray, guided policy recommendations, hosted MTA-STS/TLS-RPT, and webhooks in one authentication workspace.
- You want an MSP offer with public starting economics, white-label reports, and a separate API or MCP route for automation; confirm the exact partner terms before packaging it.
- You want the agent to investigate every sender, draft every fix, and propose each policy step so your team approves before anything ships.
- You want hosted SPF, DKIM, DMARC, BIMI, and MTA-STS records, plus native ConnectWise, HaloPSA, and Autotask integrations for MSP operations.
- You want unlimited IT-team and MSP report history (Enterprise retention follows custom terms) and MSP pricing based on client domains without metering each client's email volume.
IT-team plans start at $19 a month, sized by email volume. Start with a 15-day full-product trial; nothing is charged until it ends.
Where the day-to-day work actually differs
| Feature | DMARCDKIM.com | Palisade |
|---|---|---|
| Monitoring & analysis | ||
| DMARC aggregate report monitoring and dashboard analyticsWhether aggregate DMARC data is collected and presented for review.Source (2026-08-26) Source 2 (2026-08-26) | Supported | Agent report analysis |
| Sender identification and SPF/DKIM alignment visibilityWhether each sender's identity and authentication alignment are visible.DMARCDKIM.com says it resolves and classifies sending servers, shows per-source SPF/DKIM results, and highlights alignment issues (checked 2026-08-26). Source (2026-08-26) | Resolved sender results | Agent sender analysis |
| Aggregate DMARC reportsWhether aggregate and detailed DMARC reports are available for review.Aggregate reports are listed on Free; aggregate and forensic reports are listed on Basic, Pro, and Enterprise (checked 2026-08-26). Source (2026-08-26) | Free and paid reports | Aggregate and forensic reports |
| Authentication diagnostics | ||
| SPF analysis correlated with real DMARC trafficWhether SPF record analysis is tied to observed sending traffic.SPF X-ray maps SPF rules to 90 days of sending data, identifies active providers and IPs, and recommends entries to keep, review, or remove (checked 2026-08-26). Source (2026-08-26) | 90-day traffic mapping | Agent SPF investigation |
| DKIM X-ray and DNS monitoringWhether DKIM records and related DNS changes are monitored.DKIM X-ray and DNS monitoring are listed in the Basic, Pro, and Enterprise plan features (checked 2026-08-26). Source (2026-08-26) | Basic tier and above | Agent-backed diagnostics |
| Guided DMARC rollout from p=none toward p=rejectWhether a team gets a phased path from monitoring to enforcement.The DMARC Analytics page describes a step-by-step action plan to configure DKIM, fix SPF, and tighten policy one stage at a time (checked 2026-08-26). Source (2026-08-26) | Staged policy guidance | Agent drafts and proposes |
| AI agent that investigates senders, drafts fixes, and proposes each enforcement step for approvalWhether an agent prepares sender fixes and policy steps for approval.DMARCDKIM.com advertises guided recommendations, dashboards, and an MCP/AI-assistant interface, but does not advertise an enforcement agent that drafts each fix and carries each policy step for approval (checked 2026-08-26). Source (2026-08-26) Source 2 (2026-08-26) | —Not advertised | Agent drafts and proposes |
| Transport security | ||
| Hosted MTA-STS policy files and TLS-RPT reportingWhether MTA-STS policies and TLS failure reports are hosted.DMARCDKIM.com says it hosts MTA-STS policy files, manages the required DNS records, and receives SMTP TLS reports (checked 2026-08-26). Source (2026-08-26) | Hosted policies and reports | Hosted on managed DNS |
| SPF flattening or a flattened root recordWhether the root SPF record is reduced to avoid lookup limits.DMARCDKIM.com's SPF X-ray page explicitly positions its subdomain-based SPF design as an alternative to SPF flattening and says it works without flattening (checked 2026-08-26). Source (2026-08-26) | No flattening | Hosted SPF flattening |
| MSP operations | ||
| Multi-domain monitoring in one accountWhether one account monitors authentication results across multiple domains.The DMARC Analytics page says one account can monitor multiple domains and compare authentication performance across them (checked 2026-08-26). Source (2026-08-26) | Multi-domain dashboard | Agent portfolio monitoring |
| White-label client reports and MSP packagingWhether MSPs can give clients reports carrying their brand.The MSP revenue page advertises white-label, client-ready handover reports and branded reports carrying the MSP's company name and logo (checked 2026-08-26). Source (2026-08-26) Source 2 (2026-08-26) | Branded handover reports | White-label before-and-after |
| Account-data access via API or MCP on every planWhether API or MCP access to account data is included on every plan; public lookup tools are a separate scope.MCP lookup and SPF Merge tools are free after sign-in; account-data tools require a paid plan. REST API access requires Pro or Enterprise after the trial. Source (2026-10-13) Source 2 (2026-10-13) | Account data requires a paid plan | Included on every plan |
| Native ConnectWise, HaloPSA, and Autotask integrationsWhether named PSA systems connect to client-domain operations.DMARCDKIM.com's public MSP, API, and MCP pages describe partner pricing, multi-domain management, APIs, and AI clients but do not advertise native ConnectWise, HaloPSA, or Autotask integrations (checked 2026-08-26). Source (2026-08-26) Source 2 (2026-08-26) Source 3 (2026-08-26) | —Not advertised | Native PSA integrations |
| AI and automation access | ||
| Customer API access outside the dashboardWhether customers can use documented programmatic access rather than only the dashboard.DMARCDKIM.com publishes a REST API with an OpenAPI reference for reports, DNS records, notifications, and TLS-RPT data. Its public pricing page lists API access on Pro and Enterprise (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27) | Pro and Enterprise | REST API published |
| MCP server for connecting AI assistants to domain dataWhether an AI assistant can reach the product's data directly.DMARCDKIM.com publishes an MCP server for AI assistants to read stored reports, failing-sender data, DNS history, change alerts, and TLS reports (checked 2026-08-27). Source (2026-08-27) | MCP server published | MCP server published |
| AI assistant that prepares authentication changesWhether the vendor advertises AI that prepares authentication changes.The published MCP SPF Merge tool combines records or mechanisms, removes duplicates and returns an SPF record for the operator to deploy. Account tools read reports and DNS history; direct DNS writes and a complete approval-based DMARC enforcement agent are not advertised. Free lookup tools require sign-in; account data requires a paid plan. Source (2026-10-13) | Prepares merged SPF text | Agent drafts fixes |
| Report output outside the dashboardWhether report information can leave the product without the web interface.DMARCDKIM.com's API supports downloads of original DMARC XML and TLS-RPT JSON. Its public pricing page lists webhooks for Slack, Teams, and other destinations on Basic, Pro, and Enterprise (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27) | API downloads and webhooks | REST API published |
Want to compare the workflow yourself? Start a 15-day full-product trial of Palisade.
Palisade vs DMARCDKIM.com: score evidence and limitations
Both products are scored on the same eight dimensions the comparison hub uses, so the figures here are the figures there. Four are derived from vendor facts that each carry a source and a checked date. Four are editorial, marked as such below, and each states its reasoning and its source.
Each dimension is out of 10 and the total is the raw sum out of 80, rescaled to 100 — the raw figure is printed beside it so the conversion is checkable rather than a black box. Scored on what each vendor publishes, not on how the product feels in use. Unknown scoring dimensions are shown as Not established; provisional scores average only established dimensions and show coverage. They may change as remaining dimensions are verified. Current ranks include full and provisional scores; equal displayed scores share a rank. Historical assessments are separate. Editorial dimensions last reviewed 2026-10-15.
Provisional · 6/8 dimensions established
Average of established dimensions; may change as remaining dimensions are verified.
Full rubric · 8/8 dimensions established
How reachable the vendor's DMARC data is from your own software and AI tools. Two paths count, an API and an MCP server, and each only if it reaches DMARC data (domains, records, reports or sending sources). A path is open when it is documented and included from the cheapest paid plan; gated when it needs a higher tier, an add-on, a sales call or a request, or the vendor does not say which plans include it. 10 = both open. 9 = one open, one gated. 8 = both gated. 7 = one open, the other absent. 6 = one gated, the other absent. 5 = access claimed in marketing only, with no docs or plan listing. 4 = reachable only through a self-hosted tool's own interface or a host platform's API, such as parsedmarc's library or Splunk's REST API; a dashboard over a database you run yourself does not count. 3 = no API or MCP server reaches DMARC data.
DMARCDKIM.com publishes a REST API and an OAuth-authenticated MCP server. MCP lookup and SPF Merge tools are free after sign-in; account-data tools need a paid plan. The API page separately requires Pro or Enterprise after the trial. Source (2026-10-13) Source (2026-10-14)
Palisade publishes a REST API and a remote MCP server on every plan, making the same domain data and remediation workflows available to connected software. Source (2026-08-30)
How much of the report analysis is done for you. 10 = the platform turns raw report data into a prioritised, actionable queue on its own.
Actionable alerts, DNS history, API data, webhooks, and MCP tools turn reports and authentication changes into filtered operational findings. Source (2026-08-28)
Report data is analysed into a prioritised list of sender, SPF, DKIM and DMARC issues, so nobody reads raw XML. Source (2026-08-30)
How much of the work the vendor's own software does. 10 = it identifies the sending sources, drafts the SPF and DKIM fixes each one needs, and proposes the next policy step. 6 = it applies the records for you, but a person decides what to fix and when to advance. 3 = it reports, and every change is yours to make. A vendor whose team does the work rather than its software scores here on the software alone.
The MCP server identifies failures and prepares an SPF record, but the published tools leave SPF, DKIM, and DMARC changes and policy advancement to the operator. Source (2026-08-28)
The agent investigates each sender, drafts the SPF and DKIM changes it needs, and proposes the next policy step; a human approves before deployment. Source (2026-08-30)
10 = full pricing published. 6 = some tiers published, rest quote-gated. 3 = quote only.
Self-service Free, Mini, Basic, Pro and Enterprise rates are published by billing commitment; MSP starts at €0.33/domain, with full partner pricing custom. Source (2026-10-13) Source (2026-10-13)
Self-service IT-team prices are published by email volume from $19/month; MSP pricing is portfolio-based per client domain, and Enterprise pricing is custom. Source (2026-08-30)
10 = hosts the records for you. 6 = partial or add-on. 3 = you manage your own DNS.
DMARCDKIM.com publishes hosted MTA-STS policy files and TLS-RPT reporting. Hosting of the scored SPF, DKIM and DMARC records is not established by the cited service page. Source (2026-08-28)
Yes: hosted DMARC, SPF, DKIM, BIMI & MTA-STS Source (2026-08-30)
10 = a genuine free plan. 6 = time-limited trial only. 3 = no free access.
A €0 plan covers one domain and 5,000 emails but is restricted to non-commercial use. Source (2026-08-28)
No free plan: a 15-day full-product trial; nothing is charged until the trial ends Source (2026-09-25)
10 = a real MSP program with multi-tenant management. 6 = partial. 3 = none.
Yes: an MSP programme publishes wholesale pricing, volume discounts, second-line support, training, and a managed-services path. Source (2026-08-28)
Yes: MSP-first, multi-tenant with native PSA integrations Source (2026-08-30)
How much work it takes to get a domain from p=none to p=reject. 10 = the platform (or the vendor's team) gets you there without manual DNS edits.
The MSP offer documents phased guidance and engineering support while customers update DNS; hosted MTA-STS and SPF management need separate evidence. Source (2026-08-28)
The DMARC Agent detects when a domain's authentication and alignment are ready for the next policy stage and proposes the move, but a human still approves and applies it, so it is not fully hands-off. Source (2026-08-30)
Where Palisade and DMARCDKIM.com actually differ
Each argument keeps the product screens, sourced comparison points, and supporting analysis together.
Dashboard insight vs agent action
DMARCDKIM.com dashboard and guided policy rollout.
DMARCDKIM.com is not just a raw XML mailbox. Its DMARC Analytics page describes a dashboard that resolves each sending server into a named provider, shows per-source SPF and DKIM pass/fail results, and highlights alignment problems. The public pricing page adds aggregate and forensic reports on the paid tiers, DNS monitoring, actionable alerts, and different retention windows by plan. These published features help a team identify sending services and investigate authentication failures. Source (2026-08-26) Source 2 (2026-08-26)
DMARCDKIM.com
Palisade
- DMARC aggregate report monitoring and dashboard analytics: Agent report analysis
- Sender identification and SPF/DKIM alignment visibility: Agent sender analysis
- Aggregate DMARC reports: Aggregate and forensic reports
The product also describes a guided policy path. Its public workflow starts with a domain check, moves to report monitoring, exposes misconfigured sources, and then gives a step-by-step action plan to configure DKIM, fix SPF, and tighten the DMARC policy one stage at a time. That is a coherent operator-led workflow: the dashboard turns report data into recommendations, and a human decides which record or provider to change. The narrow difference is who prepares the recurring work. Palisade's agent investigates every sender, drafts every fix, and proposes each policy step while your team approves before anything ships. Source (2026-08-26) Source 2 (2026-08-26)
Entry price vs portfolio limits
DMARCDKIM.com's Basic plan and features
DMARCDKIM.com publishes a lower entry point than many enterprise DMARC platforms. Mini is €4 per month for up to 10,000 emails and two domains. Basic is €20 per month, or €180 billed annually (€15 per month), for up to 200,000 emails and 20 domains. Basic adds three months of retention, aggregate and forensic reports, DKIM X-ray, actionable alerts, MTA-STS and TLS-RPT coverage, and webhooks for destinations such as Slack and Teams. Pro is €80 monthly or €720 annually (€60 per month), with 120 domains, 5 million emails, 12 months of history, and REST API access; free MCP lookup tools are available after sign-in, while account-data tools require a paid plan. Enterprise raises the published ceiling to 1,000 domains and 40 million emails at €440 monthly or €3,960 annually (€330 per month). Source (2026-10-13)
DMARCDKIM.com
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- DKIM X-ray and DNS monitoring: Agent-backed diagnostics
- AI agent that investigates senders, drafts fixes, and proposes each enforcement step for approval: Agent drafts and proposes
- Guided DMARC rollout from p=none toward p=reject: Agent drafts and proposes
The billing unit deserves a close read. Every self-serve level combines an email-volume ceiling with a domain ceiling, so a portfolio can hit either limit first. The public page does not advertise unlimited retention: the window is one month on Mini, three months on Basic, and twelve months on Pro and Enterprise. The MSP page uses a separate partner route, advertising a starting price of €0.33 per domain and telling partners that final customer pricing is theirs to set. That can be attractive for a service provider testing a small recurring offer, but ask for the current partner rate card, overage mechanics, and client-account controls before using the starting number in a margin model. Source (2026-08-26) Source 2 (2026-08-26)
What each side charges
Three points on each published range: the cheapest plan, one in the middle, and the top of what the vendor publishes. Every plan on both sides is in the pricing section further down.
- Free€0/mo
Up to 5,000 emails, 1 domain, unlimited seats, 14 days of data retention, aggregate reports only, basic analytics; personal use only
- Basic€20/mo monthly or €15/mo billed annually (€180/year)
Up to 200,000 emails, 20 domains, ticket support, 3 months of retention, aggregate and forensic reports, SPF/DKIM X-ray, DNS monitoring, actionable alerts, MTA-STS/TLS-RPT, and webhooks
- MSP partner programStarting at €0.33/domain; full pricing custom
DMARC-as-a-Service, second-line support, white-label reports, recurring-revenue packaging, and volume-based partner pricing
- IT teams: up to 100,000 emails/mo$19/mo ($15/mo billed annually)
2 set-up domains (adding is unlimited), unlimited retention, every core feature
- IT teams: up to 1,000,000 emails/mo$99/mo ($79/mo billed annually)
Same product: 10 set-up domains, pick the tier that matches your sending
- Enterprise (more than 2.5M / month)Custom
Custom volume, retention, and terms
DNS ownership vs managed SPF
SPF X-ray chooses subdomain design over flattening
SPF X-ray is one of DMARCDKIM.com's most specific product surfaces. It expands the SPF tree, detects syntax errors and duplicates, maps rules to actual sender IPs seen in DMARC reports, and visualizes 90 days of activity in a heatmap. Its recommendations label entries to keep, review, or safely remove, and the page says the monitoring continues after a change so unused entries can be identified after 90 days. The published SPF history and recommendations support investigation of authentication drift. Source (2026-08-26)
DMARCDKIM.com
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- SPF analysis correlated with real DMARC traffic: Agent SPF investigation
- Guided DMARC rollout from p=none toward p=reject: Agent drafts and proposes
- AI agent that investigates senders, drafts fixes, and proposes each enforcement step for approval: Agent drafts and proposes
The design choice is different from Palisade's hosted SPF approach. DMARCDKIM.com says SPF flattening is brittle because provider IP ranges change, and recommends assigning each provider an SPF record on a subdomain instead. That may suit an organization that wants to keep the root record readable and retain direct ownership of the DNS design. Palisade takes a managed-record route: its hosted SPF solves the lookup problem through a hosted record, while its Smart DNS Deployment connection writes approved records into the customer's own DNS provider. The decision turns on whether your team wants guidance around a hand-maintained architecture or managed infrastructure that absorbs more of the recurring configuration work. Source (2026-08-26) Source 2 (2026-08-26)
Transport hosting vs sender remediation
Hosted MTA-STS closes a gap beyond DMARC reports
DMARCDKIM.com extends its dashboard into transport security. Its hosted MTA-STS and TLS-RPT page says the service hosts the policy file at the required HTTPS endpoint, manages the _mta-sts and _smtp._tls DNS records, updates the policy version when settings change, and receives SMTP TLS reports. Customers select the MX servers that are authorized to receive mail and choose testing or enforce mode. The result is a meaningful parity point for teams that want DMARC authentication evidence and inbound TLS policy management in the same vendor relationship. Source (2026-08-26)
DMARCDKIM.com
Palisade
- Hosted MTA-STS policy files and TLS-RPT reporting: Hosted on managed DNS
- SPF flattening or a flattened root record: Hosted SPF flattening
That transport feature should not be confused with an enforcement agent. DMARCDKIM.com's public materials describe automatic hosting and DNS configuration for MTA-STS, plus guided DMARC recommendations and policy controls. They do not advertise an agent that investigates each DMARC sender, drafts SPF and DKIM remediation, and proposes every move toward p=reject for approval. Palisade's position is narrower and more operational: the agent prepares that queue, and your team reviews each proposed change before it ships. Source (2026-08-26) Source 2 (2026-08-26) Source 3 (2026-08-26)
MSP pricing vs PSA workflow
MSP pricing and PSA integration scope
DMARCDKIM.com clearly targets service providers. Its MSP partner page describes DMARC-as-a-Service, a free domain risk checker for client domains, help with safe phased deployment, and second-line support. The revenue page shows how an MSP might separate setup and recurring monitoring, offers a white-label handover report, and says branded reports can carry the partner's company name and logo while the platform stays invisible. It also advertises a starting platform price of €0.33 per domain and describes flexible tiers for larger portfolios. Those are useful ingredients for an MSP that wants to build its own client-facing service. Source (2026-08-26) Source 2 (2026-08-26)
DMARCDKIM.com
A relevant product screenshot was not available in the reviewed evidence.
Palisade
- Multi-domain monitoring in one account: Agent portfolio monitoring
- White-label client reports and MSP packaging: White-label before-and-after
- Account-data access via API or MCP on every plan: Included on every plan
The public automation story is different from a named PSA integration catalogue. DMARCDKIM.com publishes a REST API with multi-domain management, read-only scoped keys, audit logging, and SIEM-oriented use cases, and its MCP server connects DMARC data to Claude, Cursor, VS Code, Codex, and other MCP clients. REST API requires Pro or Enterprise after the trial. MCP lookup and SPF Merge tools are free after sign-in; account-data tools require a paid plan. The public MSP, API, and MCP pages do not name ConnectWise, HaloPSA, or Autotask integrations, so an MSP should verify tenant boundaries, webhooks, ticket events, and onboarding endpoints before promising a turnkey PSA workflow. Palisade advertises those native PSA integrations and is designed to reduce the investigation and fix-preparation work itself. Source (2026-08-26) Source 2 (2026-10-13) Source 3 (2026-10-13) Source 4 (2026-08-26)
Native PSA integrations
Palisade imports client domains straight from these three. DMARCDKIM.com's own coverage is stated above, from their site.
- ConnectWise PSA
- Autotask
- HaloPSA
Dashboard access vs programmatic access
DMARCDKIM.com's API and MCP access scope
DMARCDKIM.com publishes a REST API with interactive OpenAPI/Swagger documentation. It describes programmatic access to DMARC aggregate reports, TLS-RPT reports, DNS history, and domain notifications, including downloads of original XML and JSON. REST API requires Pro or Enterprise after the trial. MCP lookup and SPF Merge tools are free after sign-in; account-data tools require a paid plan. Basic, Pro, and Enterprise list webhooks for Slack, Teams, and other destinations. DMARCDKIM.com also publishes an MCP server for AI assistants to read report data and DNS history, identify failures, and explain what to fix. Its free MCP SPF Merge tool can prepare merged SPF record text for the operator to deploy. The published account tools read reports and DNS history; they do not advertise direct DNS writes or a complete approval-based DMARC enforcement agent (checked 2026-10-13). Source (2026-10-13) Source 2 (2026-10-13) Source 3 (2026-10-13)
DMARCDKIM.com
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- Customer API access outside the dashboard: REST API published
- MCP server for connecting AI assistants to domain data: MCP server published
- AI assistant that prepares authentication changes: Agent drafts fixes
Palisade publishes an MCP server and a REST API. Its agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step. A human approves before anything ships.
Reachable from your own AI tools
Palisade's MCP server exposes 42 tools over OAuth, so the assistant your team already uses can read domains, pull the exact records to publish and work the task queue. These are the clients the connection guide walks through.
- ChatGPT
- Claude
- Codex
- Cursor
- Windsurf
- Any MCP client
Still deciding between DMARCDKIM.com and Palisade? See what changes with Palisade.
15-day full-product trial. Nothing is charged until it ends.
Microsoft 365
Zoho Mail
The agent does the heavy lifting
Sources identified, SPF and DKIM fixes drafted, each policy step proposed. You approve; nothing ships on its own.
Connect your AI with MCP
42 tools over MCP, so your assistant reads your domains and works the queue.
Connect your DNS manager directly
One-time sign-in supports 64 providers without retaining credentials. Optional account connections support Cloudflare, GoDaddy and Route 53. You approve every change.
“We evaluated many DMARC providers before choosing Palisade. The quality of their product, the responsiveness and friendliness of their team and their rapid progress on their product roadmap made it a no-brainer for us to move forward.”
DMARCDKIM.com pricing and plan limits
DMARCDKIM.com publishes five product levels, with monthly and annual prices tied to email volume and domain count. It also publishes a separate MSP starting price, while the full partner rate card remains custom. These are the public terms shown when checked on October 13, 2026:
What you'd actually pay
The same five buyer sizes on every comparison, so a shape carries from one page to the next.
1 domain, up to 1,000 emails a month
Free: 1 domain and up to 5,000 emails; personal use only
2 set-up domains, up to 100K emails a month
Basic: up to 20 domains and 200,000 emails; no exact combined 2-domain/100,000-email tier published
10 set-up domains, up to 1M emails a month
Pro: up to 120 domains and 5,000,000 emails; no 10-domain or 1,000,000-email tier published
20 set-up domains, up to 2.5M emails a month
Pro: up to 120 domains and 5,000,000 emails; no 20-domain or 2,500,000-email tier published
Client domains under management, any volume
MSP pricing is custom; no fixed plan or full partner rate card is published
Palisade’s figures are derived from its published tiers. DMARCDKIM.com pricing or licensing source reference: vendor source citation date 2026-10-13. Plans and prices may have changed since.
How DMARCDKIM.com prices
- The pricing page says all features are free for 7 days, and the paid plan cards say no credit card is required for the 7-day trial.
- The monthly and annual prices on the page are shown before taxes. Basic's annual display is €180 billed annually against a €240 monthly-equivalent total; Pro is €720 against €960, and Enterprise is €3,960 against €5,280.
- DMARCDKIM.com publishes email-volume and domain ceilings for each self-serve tier. The MSP page advertises a starting price of €0.33/domain and says larger deployments use flexible pricing tiers; it does not publish a complete partner rate card.
- The public page lists 1 month of retention on Mini, 3 months on Basic, and 12 months on Pro and Enterprise. It does not advertise unlimited report history.
- The pricing FAQ says forwarded and spoofed emails do not count toward the email-volume quota, and that subscriptions can be cancelled through the billing portal at any time (checked 2026-08-26).
How Palisade prices
- Palisade publishes flat IT-team plans sized by email volume at $19, $29, $59, $99, and $249 per month; annual billing is 20% lower.
- Palisade paid IT tiers include 2, 3, 6, 10, or 20 set-up domains by volume tier. Adding domains is free and unlimited; only domain setup counts against the tier.
- Palisade MSP pricing is per client domain, with a rate that improves as the portfolio grows and a minimum of 5 client domains. Client email volume is not metered, and the MSP's own domain is included as a free Not-For-Resale license.
- Palisade offers a 15-day full-product trial. IT-team and MSP plans include unlimited report history (Enterprise retention follows custom terms), and API access is included on every plan, while DMARCDKIM.com's REST API requires Pro or Enterprise after the trial; MCP lookup and SPF Merge tools are free after sign-in, while account-data tools require a paid plan.
DMARCDKIM.com source reference: primary reference citation date 2026-10-13.Palisade source reference: the public pricing page citation date 2026-08-26.Plans and prices may have changed since.
Start a 15-day full-product trial of Palisade. Nothing is charged until it ends.
What each one covers, and where it stops
Published facts only, read from each vendor's own material. Neither column describes a hands-on trial, because we have not run one.
DMARCDKIM.com combines DMARC analytics, SPF and DKIM diagnostics, guided policy rollout, hosted MTA-STS/TLS-RPT, and programmatic access. MCP lookup and SPF Merge tools are free after sign-in; account-data tools require a paid plan, while REST API access requires Pro or Enterprise after the trial. Its dashboard resolves sending servers, shows per-source SPF/DKIM results and alignment issues, and provides aggregate and forensic reports, DNS monitoring, alerts, and retention windows according to plan.
The service targets teams that need diagnostics and policy recommendations, alongside service providers that want multi-domain management, white-label reporting, and a separate MSP offering. Its published self-serve plans use both email-volume and domain limits; Mini starts at €4/mo, while the MSP program starts at €0.33/domain with partner rates set separately.
Palisade is built around an agent that does the DMARC work rather than reporting on it. It identifies every sending source, drafts the SPF and DKIM changes each one needs, and proposes the next policy step when the evidence supports it.
The agent investigates every sender, drafts every fix, and proposes each policy step, you approve before anything ships.
- Supports DMARC aggregate report monitoring and dashboard analytics
- Provides resolved sender results with SPF/DKIM alignment visibility
- Provides 90-day traffic mapping for SPF analysis
- Hosts MTA-STS policies and TLS-RPT reports
- Provides API downloads and webhooks
- The agent investigates senders and drafts the fix, so the work arrives prepared rather than as a list of findings
- Hosted SPF, DKIM and DMARC records, so an approved change can be carried out rather than handed off
- Portfolio workflow for MSPs, with ConnectWise, HaloPSA and Autotask integrations and a free NFR domain
- An MCP server and a REST API, so the same data and workflow are reachable from the AI tools a team already uses
- Does not advertise an AI agent that drafts fixes and proposes enforcement steps for approval
- Does not advertise SPF flattening or a flattened root record
- Free MCP lookup and SPF Merge tools require sign-in; account-data tools require a paid plan, and REST API requires Pro or Enterprise.
- Does not advertise named ConnectWise, HaloPSA, or Autotask integrations
- Every policy change waits for a human approval, by design: nothing ships on the agent's own authority
- MSP pricing is portfolio-based per client domain, with a minimum of 5 client domains
- Plans are sized by monthly email volume, so a low-domain, high-volume sender lands on a higher tier than domain count alone suggests
- Starts at
- €4/mo for 2 domains
- Free tier
- €0/mo for 1 personal domain
- Trial length
- 7 days, no credit card
- MSP model
- €0.33/domain; full pricing custom
- Starts at
- IT plans from $19/mo by email volume; 15-day trial
- Trial
- 15 days, full product
- MSP model
- Portfolio-based per client domain; minimum of 5 client domains
What Palisade customers say
5.0 out of 5 on G2Trusted by over 10,000 domains
“Palisade made it so easy for us to get our blue verified checkmark and achieve our BIMI compliance”
Sources and further reading
Source checks run through 2026-10-14; every entry keeps its individual check date.
- DMARCDKIM.com homepage (rechecked)
Checked 2026-08-27
- Additional first-party evidence
Checked 2026-10-13
- DMARCDKIM.com pricing
Checked 2026-10-14
- Additional first-party evidence
Checked 2026-10-13
- DMARCDKIM.com hosted MTA-STS
Checked 2026-10-13
- DMARCDKIM.com MSP programme
Checked 2026-10-13
- Additional first-party evidence
Checked 2026-10-13
- DMARCDKIM.com API
Checked 2026-10-14
- DMARCDKIM.com MCP server
Checked 2026-10-14
- DMARCDKIM.com OpenAPI reference
Checked 2026-08-27
- Palisade DMARC Agent
Checked 2026-08-26
- Palisade pricing
Checked 2026-08-26
- DMARCDKIM.com Azure Marketplace announcement
Checked 2026-10-13
- Source
Checked 2026-10-14
- Source
Checked 2026-08-26
- Source
Checked 2026-08-26
Palisade vs DMARCDKIM.com: FAQ
What is the main difference between DMARCDKIM.com and Palisade?
DMARCDKIM.com combines DMARC analytics, SPF/DKIM diagnostics, guided policy recommendations, hosted MTA-STS/TLS-RPT, and free MCP lookup and SPF Merge tools after sign-in, paid account-data tools, and REST API on Pro or Enterprise. Palisade is agentic: its agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step toward p=reject while your team approves before anything ships.
How much does DMARCDKIM.com cost?
DMARCDKIM.com publishes Free, Mini, Basic, Pro, and Enterprise tiers. Month-to-month prices are €4, €20, €80, and €440 for the paid tiers; annual totals are €48, €180, €720, and €3,960 respectively. The MSP page separately advertises a starting price of €0.33 per domain, while full partner pricing is custom.
Does DMARCDKIM.com have a free trial?
Yes. The pricing page says all features are free for 7 days, and the paid plan cards say no credit card is required for the 7-day trial. There is also a €0 Free plan for one domain and up to 5,000 emails, with 14 days of data retention and aggregate reports only; the page labels that plan non-commercial.
Does DMARCDKIM.com provide API or MCP access?
Does DMARCDKIM.com support MSPs and white-label reports?
Yes. Its MSP pages describe DMARC-as-a-Service, second-line support, multi-domain client work, white-label and client-ready reports, and a starting platform price of €0.33 per domain. The full partner rate card is custom, so confirm account separation, billing, support, and report-branding terms before committing a client portfolio.
Does DMARCDKIM.com integrate with ConnectWise, HaloPSA, or Autotask?
The public pages checked on August 26, 2026 describe APIs, webhooks, MCP clients, and MSP support, but do not name native ConnectWise, HaloPSA, or Autotask integrations. Ask for current API documentation and a tenant-safe ticketing example if one of those PSA destinations is required. Palisade advertises native integrations with all three for MSP accounts.
Can I run DMARCDKIM.com and Palisade during a migration?
Yes. DMARC reporting supports multiple recipients, so you can send reports to both platforms during an evaluation window. Keep the policy-change owner clear, compare sender and alignment findings, and move the reporting destination fully only after your team is comfortable with the Palisade workflow.
Switching from DMARCDKIM.com takes three steps
- 1
Batch-import your domains
Bring your client domains into Palisade in bulk, or let your ConnectWise, HaloPSA, or Autotask integration sync them automatically.
- 2
Run both platforms in parallel
Keep both reporting destinations configured during the overlap, verify external-report authorization where required, and confirm reports arrive in both platforms before retiring DMARCDKIM.com. Review hosted-record dependencies before changing DNS.
- 3
Cut DNS over on your schedule
Point records at Palisade's hosted infrastructure, then retire the old setup when you're satisfied.
15-day full-product trial. Nothing is charged until it ends.
Source citations on this page run through 2026-10-14; individual claims retain their dates and evidence limitations. Spotted something out of date? Tell us and we'll fix it.