DMARCPal vs Palisade in 2026
DMARCPal is a focused DMARC reporting and DNS-checking tool for email administrators. Palisade is agentic: its AI agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step for your approval.
Our verdict: Pick DMARCPal if your team wants a focused report browser, provider and record explorers, and DNS health checks, and is comfortable making the resulting changes itself. Pick Palisade if you want an AI agent to investigate senders, prepare SPF and DKIM fixes, and carry domains toward p=reject with your approval at every step.
Samuel Chenard · CEO & Co-Founder, PalisadeSource checks through 2026-10-1315-day full-product trial. Nothing is charged until it ends.
ChatGPT
Claude
Gemini
Perplexity
Grok
Palisade
Provisional · 5/8 dimensions established
Average of established dimensions; may change as remaining dimensions are verified.
Full rubric · 8/8 dimensions established
Palisade's IT-team plans start at $19 a month, sized by email volume. Start with a 15-day full-product trial; nothing is charged until it ends.
Which one is right for you?
Best for Technical teams comfortable making DNS changes
Best for MSPs and IT teams responsible for multiple domains
- You want a compact DMARC console with report aggregation, provider views, charts, pass/fail statistics, and geolocation.
- Your operators are comfortable reading DMARC, SPF, and DKIM evidence and adding the generated records at your own DNS host.
- DMARCPal advertises unlimited domains per account, while its pricing widget charges per domain. Every plan card includes unlimited users and reports; choose the diagnostics, monitoring and retention tier your team needs.
- You want the agent to investigate every sender, draft every SPF and DKIM fix, and propose each policy step so you approve before anything ships.
- You want hosted SPF, DKIM, DMARC, BIMI, and MTA-STS records, or Smart DNS Deployment through your DNS provider.
- You manage internal or client domains and want a repeatable operational workflow with native ConnectWise, HaloPSA, or Autotask integrations.
IT-team plans start at $19 a month, sized by email volume. Start with a 15-day full-product trial; nothing is charged until it ends.
Where the day-to-day work actually differs
| Feature | DMARCPal | Palisade |
|---|---|---|
| Reporting and analysis | ||
| DMARC aggregate report monitoring and browser-based report reviewWhether aggregate DMARC reports can be searched and reviewed in a browser.DMARCPal says it processes DMARC reports and presents them in a browseable, searchable interface with filtering. Source (2026-08-26) | Searchable report review | Sender findings and tickets |
| Charts, pass/fail statistics, and email-source geolocationWhether message activity can be summarized by result, source, and geography.The product page advertises email activity charts, pass/fail statistics, and geolocation for the country where email is received. Source (2026-08-26) | Activity charts and location | Report analytics |
| Email Provider Explorer and DMARC Record ExplorerWhether individual providers and authentication records can be explored in detail.DMARCPal documents both explorers, including provider-level report browsing and SPF/DKIM pass/fail views. Source (2026-08-26) | Provider and record views | Sender findings and tickets |
| Authentication tools | ||
| Domain Health Check for DMARC, SPF, and DKIM DNS recordsWhether a domain's DMARC, SPF, and DKIM DNS records can be checked for errors.Domain Health Check looks up DMARC-related DNS records and checks DMARC, SPF, and DKIM selectors for errors. Source (2026-08-26) | DNS record health checks | Agent reviews DNS records |
| DKIM selector analysis for identifying stale selectorsWhether DKIM selectors can be reviewed to identify keys that may be stale.DMARCPal's DKIM Selector Tool analyses selectors seen recently so operators can review stale keys before removing them. Source (2026-08-26) | Recent DKIM selector review | Agent reviews sender evidence |
| Monitoring and email alerts for DNS authentication issuesWhether monitoring notifies a team about DNS authentication issues.DMARCPal says it monitors DMARC, SPF, and DKIM records and emails users when it finds issues; the product page places broken-DNS alerts among Premium features. Source (2026-08-26) Source 2 (2026-08-26) | Email alerts for issues | Report and ticket alerts |
| Account management | ||
| Unlimited domains and unlimited usersWhether one account can manage unlimited domains and users.The product and home pages advertise unlimited domains and users on a single account. Source (2026-08-26) Source 2 (2026-08-26) | Unlimited domains, shared access | Unlimited adding and users |
| Enforcement workflow | ||
| AI agent that investigates senders, drafts fixes, and proposes policy steps for approvalWhether an agent can investigate sender issues, draft fixes, and prepare policy actions for review.DMARCPal advertises report views, implementation tools, and DNS checks, but does not advertise an AI enforcement agent with this approval-based workflow (checked 2026-08-26) Source (2026-08-26) Source 2 (2026-08-26) | No AI agent | Agent drafts and proposes |
| Automated DNS changes after customer approvalWhether DNS authentication records can be written after customer approval.DMARCPal's setup guidance tells the reader to paste the displayed DMARC record into their DNS hosting service; automated DNS changes are not advertised (checked 2026-08-26) Source (2026-08-26) | No DNS automation | Approved DNS deployment |
| Hosted records and DNS | ||
| Hosted SPF, DKIM, DMARC, and BIMI recordsWhether the platform can host SPF, DKIM, DMARC, and BIMI records.DMARCPal describes checking records and showing a record to add at the customer's DNS host; hosted authentication records are not advertised (checked 2026-08-26) Source (2026-08-26) Source 2 (2026-08-26) | —Not advertised | Hosted on managed DNS |
| MSP operations | ||
| Native ConnectWise, HaloPSA, and Autotask integrationsWhether the platform connects to the PSA systems an MSP uses to manage client work.DMARCPal's public product, pricing, and support pages do not advertise ConnectWise, HaloPSA, or Autotask integrations (checked 2026-08-26) Source (2026-08-26) Source 2 (2026-08-26) Source 3 (2026-08-26) | —Not advertised | Native PSA integrations |
| White-label client reporting and multi-tenant operationsWhether MSPs can operate multiple clients and brand their reports.DMARCPal advertises unlimited domains and users but does not advertise white-label reporting or a multi-tenant MSP operating layer (checked 2026-08-26) Source (2026-08-26) Source 2 (2026-08-26) | —Not advertised | White-label multi-tenant operations |
| AI and automation access | ||
| Documented API for programmatic access to DMARC dataWhether customers can build against a published REST or GraphQL endpoint reference.DMARCPal's public product page lists report aggregation, record explorers, DNS checks, monitoring, and alerts. Its site navigation lists Product, Pricing, Learn, Support, and the Console; it does not advertise a documented REST or GraphQL API (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27) | —No public API listed | REST API published |
| MCP server for connecting AI assistants to domain dataWhether an AI assistant can reach the product's data directly.DMARCPal's public navigation directs visitors to Product, Pricing, Learn, Support, and the Console. It does not advertise an MCP server or an AI-assistant integration (checked 2026-08-27). Source (2026-08-27) | —No MCP server listed | MCP server published |
| Advertised AI or machine-learning product featureWhether the vendor advertises AI or machine learning inside the product and explains its purpose.DMARCPal's product page describes report aggregation, explorers, DNS checks, monitoring, and alerts. It does not advertise an AI or machine-learning product feature (checked 2026-08-27). Source (2026-08-27) | —No AI feature listed | Agent drafts fixes |
| Scheduled data export or outbound webhooksWhether product data can leave the dashboard through a scheduled export, webhooks, or a data feed.DMARCPal's public product, pricing, and support pages describe the product, plans, support contact, and console access; they do not advertise scheduled exports, outbound webhooks, or a data feed (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27) Source 3 (2026-08-27) | No export or webhooks | REST API published |
Want to compare the workflow yourself? Start a 15-day full-product trial of Palisade.
Palisade vs DMARCPal: score evidence and limitations
Both products are scored on the same eight dimensions the comparison hub uses, so the figures here are the figures there. Four are derived from vendor facts that each carry a source and a checked date. Four are editorial, marked as such below, and each states its reasoning and its source.
Each dimension is out of 10 and the total is the raw sum out of 80, rescaled to 100 — the raw figure is printed beside it so the conversion is checkable rather than a black box. Scored on what each vendor publishes, not on how the product feels in use. Unknown scoring dimensions are shown as Not established; provisional scores average only established dimensions and show coverage. They may change as remaining dimensions are verified. Current ranks include full and provisional scores; equal displayed scores share a rank. Historical assessments are separate. Editorial dimensions last reviewed 2026-10-15.
Provisional · 5/8 dimensions established
Average of established dimensions; may change as remaining dimensions are verified.
Full rubric · 8/8 dimensions established
How reachable the vendor's DMARC data is from your own software and AI tools. Two paths count, an API and an MCP server, and each only if it reaches DMARC data (domains, records, reports or sending sources). A path is open when it is documented and included from the cheapest paid plan; gated when it needs a higher tier, an add-on, a sales call or a request, or the vendor does not say which plans include it. 10 = both open. 9 = one open, one gated. 8 = both gated. 7 = one open, the other absent. 6 = one gated, the other absent. 5 = access claimed in marketing only, with no docs or plan listing. 4 = reachable only through a self-hosted tool's own interface or a host platform's API, such as parsedmarc's library or Splunk's REST API; a dashboard over a database you run yourself does not count. 3 = no API or MCP server reaches DMARC data.
DMARCPal does not advertise an API or MCP server in its public product material (checked 2026-08-28). Source (2026-08-28)
Palisade publishes a REST API and a remote MCP server on every plan, making the same domain data and remediation workflows available to connected software. Source (2026-08-30)
How much of the report analysis is done for you. 10 = the platform turns raw report data into a prioritised, actionable queue on its own.
Aggregate views, provider filtering, selector analysis, DNS checks, and alerts organize evidence for an operator to review. Source (2026-08-28)
Report data is analysed into a prioritised list of sender, SPF, DKIM and DMARC issues, so nobody reads raw XML. Source (2026-08-30)
How much of the work the vendor's own software does. 10 = it identifies the sending sources, drafts the SPF and DKIM fixes each one needs, and proposes the next policy step. 6 = it applies the records for you, but a person decides what to fix and when to advance. 3 = it reports, and every change is yours to make. A vendor whose team does the work rather than its software scores here on the software alone.
DMARCPal identifies failed SPF, DKIM, and DMARC checks, while the operator decides which sources are legitimate and makes every DNS or server change. Source (2026-08-28)
The agent investigates each sender, drafts the SPF and DKIM changes it needs, and proposes the next policy step; a human approves before deployment. Source (2026-08-30)
10 = full pricing published. 6 = some tiers published, rest quote-gated. 3 = quote only.
The embedded public pricing widget lists Lite at US$6.95, Standard at US$9.95 and Premium at US$17.95 per domain/month when USD is selected. Six currency selections are published; use the quoted currency rather than infer conversion. Source (2026-10-13)
Self-service IT-team prices are published by email volume from $19/month; MSP pricing is portfolio-based per client domain, and Enterprise pricing is custom. Source (2026-08-30)
10 = hosts the records for you. 6 = partial or add-on. 3 = you manage your own DNS.
DMARCPal checks DMARC, SPF and DKIM DNS records, sends issue alerts and supports management of multiple domains; hosted-record operation is unverified. Source (2026-08-28)
Yes: hosted DMARC, SPF, DKIM, BIMI & MTA-STS Source (2026-08-30)
10 = a genuine free plan. 6 = time-limited trial only. 3 = no free access.
No ongoing free product tier is published; a 14-day no-card trial is offered. Source (2026-08-28)
No free plan: a 15-day full-product trial; nothing is charged until the trial ends Source (2026-09-25)
10 = a real MSP program with multi-tenant management. 6 = partial. 3 = none.
No public MSP, reseller, or separate customer-tenant programme is published; accounts can hold unlimited domains and users. Source (2026-08-28)
Yes: MSP-first, multi-tenant with native PSA integrations Source (2026-08-30)
How much work it takes to get a domain from p=none to p=reject. 10 = the platform (or the vendor's team) gets you there without manual DNS edits.
The five-stage guide explains when to adjust records and advance policy, but the administrator makes every DNS change and no hosted records are published. Source (2026-08-28)
The DMARC Agent detects when a domain's authentication and alignment are ready for the next policy stage and proposes the move, but a human still approves and applies it, so it is not fully hands-off. Source (2026-08-30)
Where Palisade and DMARCPal actually differ
Each argument keeps the product screens, sourced comparison points, and supporting analysis together.
Report exploration vs fix preparation
DMARCPal's report explorers vs an agent that drafts the fix
DMARCPal is clear about its center of gravity. It processes aggregate DMARC reports and turns machine-readable records into a browseable interface. The product page names charts and statistics, an Email Provider Explorer, and a DMARC Record Explorer. Operators can filter and inspect email activity, authentication outcomes, providers such as Gmail and Yahoo Mail, and the source data behind a domain's rollout. Source (2026-08-26) Source 2 (2026-08-26)
DMARCPal
A relevant product screenshot was not available in the reviewed evidence.
Palisade
- DMARC aggregate report monitoring and browser-based report review: Sender findings and tickets
- Charts, pass/fail statistics, and email-source geolocation: Report analytics
- Email Provider Explorer and DMARC Record Explorer: Sender findings and tickets
That is real parity with Palisade's visibility layer. Both products help a team see how providers handled messages and where SPF, DKIM, or DMARC evidence needs attention. The operating difference arrives after the report is understood: DMARCPal's public material presents information and tools for an administrator, while Palisade's agent investigates each sender, drafts the authentication work, detects policy readiness, and proposes the next step toward p=reject. Your team approves before anything ships. For a technical operator who wants a clean console, DMARCPal can be enough; for a portfolio where investigation is the recurring bottleneck, the labor allocation is materially different. Source (2026-08-26) Source 2 (2026-08-26)
Feature scope vs pricing clarity
What DMARCPal's Lite, Standard, and Premium names actually tell you
DMARCPal publishes per-domain prices and a feature progression. Lite includes report processing, charts, provider browsing and failure reports. Standard adds Record Explorer, DKIM Selector Tool and Domain Health Check. Premium adds DNS monitoring, record timelines and automatic alerts; retention grows from 3 months to 1 year to 3 years. Source (2026-08-26) Source 2 (2026-08-26) Source 3 (2026-10-13)
DMARCPal
A relevant product screenshot was not available in the reviewed evidence.
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- Unlimited domains and unlimited users: Unlimited adding and users
- Automated DNS changes after customer approval: Approved DNS deployment
- Hosted SPF, DKIM, DMARC, and BIMI records: Hosted on managed DNS
DMARCPal’s pricing widget publishes per-domain monthly rates, retention and support-priority differences. With USD selected, Lite US$6.95 has 3 months history, Standard US$9.95 has 1 year and Premium US$17.95 has 3 years. Every card lists unlimited users and reports. The product supports unlimited domains per account, but adding monitored domains changes the per-domain bill; confirm any separate MSP or response-SLA terms. Source (2026-08-26) Source 2 (2026-08-26) Source 3 (2026-10-13)
What each side charges
Three points on each published range: the cheapest plan, one in the middle, and the top of what the vendor publishes. Every plan on both sides is in the pricing section further down.
- LiteUS$6.95 per domain/month
DMARC report processing/storage, statistics/charts, Email Provider Explorer, Failure Report, unlimited users and reports, normal support priority, 3 months retention
- StandardUS$9.95 per domain/month
All Lite features plus Record Explorer, DKIM Selector Tool, Domain Health Check, high support priority, 1 year retention
- PremiumUS$17.95 per domain/month
All Standard features plus DNS record monitoring, DMARC/SPF/DKIM timeline, automated alerts, highest support priority, 3 years retention
- IT teams: up to 100,000 emails/mo$19/mo ($15/mo billed annually)
2 set-up domains (adding is unlimited), unlimited retention, every core feature
- IT teams: up to 1,000,000 emails/mo$99/mo ($79/mo billed annually)
Same product: 10 set-up domains, pick the tier that matches your sending
- Enterprise (more than 2.5M / month)Custom
Custom volume, retention, and terms
DNS diagnostics vs operator execution
Domain Health Check and alerts, with DNS work left to the operator
DMARCPal's implementation story is more than report viewing. Domain Health Check looks up DMARC-related DNS records and checks SPF, DKIM, and DKIM selectors for errors that could affect deliverability. The DKIM Selector Tool helps an administrator review selectors seen recently before removing keys that may still be in use. Its monitoring guidance also describes daily record checks, a domain timeline for reviewing detected changes, and notifications to accounts that share domain access. Source (2026-08-26) Source 2 (2026-08-26)
DMARCPal
A relevant product screenshot was not available in the reviewed evidence.
Palisade
- Domain Health Check for DMARC, SPF, and DKIM DNS records: Agent reviews DNS records
- DKIM selector analysis for identifying stale selectors: Agent reviews sender evidence
- Monitoring and email alerts for DNS authentication issues: Report and ticket alerts
The handoff is explicit in DMARCPal's own setup guidance: the console shows a DMARC record, and the reader pastes it into the DNS hosting service. That can be a sensible boundary for a technically confident team that wants the provider to interpret evidence while retaining direct DNS control. It also means the operator remains responsible for translating a finding into SPF or DKIM configuration, making the DNS edit, and deciding when a domain is ready to move from none to quarantine to reject. Palisade keeps customer approval in the loop but has its agent prepare that work before the approval step. Source (2026-08-26) Source 2 (2026-08-26)
Shared access vs MSP operations
Unlimited domains and users, but no published DMARCPal MSP layer
For an in-house team, DMARCPal's account model is straightforward: its product and home pages say that one account can manage unlimited domains and that users can share management of as many domains as needed. The provider and record explorers are useful when an administrator has enough protocol knowledge to interpret the evidence, and the responsive interface is presented as usable on desktop, tablet, and mobile devices. Source (2026-08-26) Source 2 (2026-08-26)
DMARCPal
A relevant product screenshot was not available in the reviewed evidence.
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- Native ConnectWise, HaloPSA, and Autotask integrations: Native PSA integrations
- White-label client reporting and multi-tenant operations: White-label multi-tenant operations
The public site does not advertise a separate MSP portal, white-label client reports, PSA integrations, tenant roles, or partner pricing. That is not proof that a sales conversation could not cover them; it is a reason not to assume them from the unlimited-domain wording. An MSP should confirm account separation, client-facing report branding, ticket handoff, API availability, support expectations, and the commercial treatment of many domains. Palisade's MSP workflow is explicit about native ConnectWise, HaloPSA, and Autotask integrations, client-domain operations, and portfolio-based per-domain pricing, so the two evaluations should be made on those concrete operating details. Source (2026-08-26) Source 2 (2026-08-26) Source 3 (2026-08-26)
Native PSA integrations
Palisade imports client domains straight from these three. DMARCPal's own coverage is stated above, from their site.
- ConnectWise PSA
- Autotask
- HaloPSA
Dashboard access vs programmatic access
DMARCPal lists browser reporting and alerts, with no published API or MCP server
DMARCPal presents its service as browser-based DMARC reporting and DNS tooling. Its public product page names report aggregation, provider and record explorers, Domain Health Check, DKIM selector analysis, monitoring, and email alerts. The public navigation links Product, Pricing, Learn, Support, and the DMARCPal Console. Those pages do not advertise a REST or GraphQL API, MCP server, AI or machine-learning product feature, scheduled export, webhook, or data feed (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27) Source 3 (2026-08-27) Source 4 (2026-08-27)
DMARCPal
A relevant product screenshot was not available in the reviewed evidence.
Palisade
- Documented API for programmatic access to DMARC data: REST API published
- MCP server for connecting AI assistants to domain data: MCP server published
- Advertised AI or machine-learning product feature: Agent drafts fixes
Palisade publishes an MCP server and a REST API. Its agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step. A human approves before anything ships.
Reachable from your own AI tools
Palisade's MCP server exposes 42 tools over OAuth, so the assistant your team already uses can read domains, pull the exact records to publish and work the task queue. These are the clients the connection guide walks through.
- ChatGPT
- Claude
- Codex
- Cursor
- Windsurf
- Any MCP client
Still deciding between DMARCPal and Palisade? See what changes with Palisade.
15-day full-product trial. Nothing is charged until it ends.
Microsoft 365
Zoho Mail
The agent does the heavy lifting
Sources identified, SPF and DKIM fixes drafted, each policy step proposed. You approve; nothing ships on its own.
Connect your AI with MCP
42 tools over MCP, so your assistant reads your domains and works the queue.
Connect your DNS manager directly
One-time sign-in supports 64 providers without retaining credentials. Optional account connections support Cloudflare, GoDaddy and Route 53. You approve every change.
“We evaluated many DMARC providers before choosing Palisade. The quality of their product, the responsiveness and friendliness of their team and their rapid progress on their product roadmap made it a no-brainer for us to move forward.”
DMARCPal pricing and published plan terms
DMARCPal’s public pricing page embeds a currency-selectable rate table. With USD selected, Lite is US$6.95, Standard US$9.95 and Premium US$17.95 per domain/month, with 3 months, 1 year and 3 years retention respectively. All cards include unlimited users and reports.
What you'd actually pay
The same five buyer sizes on every comparison, so a shape carries from one page to the next.
1 domain, up to 1,000 emails a month
Lite self-serve rate with USD selected. Standard US$9.95 and Premium US$17.95 provide additional diagnostics/monitoring and longer retention; all cards list unlimited users/reports.
2 set-up domains, up to 100K emails a month
2 domains × US$6.95/domain/month on Lite, with USD selected. All cards list unlimited users/reports; Standard and Premium add diagnostics, monitoring and retention.
10 set-up domains, up to 1M emails a month
10 domains × US$6.95/domain/month on Lite, with USD selected. All cards list unlimited users/reports; Standard and Premium add diagnostics, monitoring and retention.
20 set-up domains, up to 2.5M emails a month
20 domains × US$6.95/domain/month on Lite, with USD selected. All cards list unlimited users/reports; Standard and Premium add diagnostics, monitoring and retention.
Client domains under management, any volume
Public self-serve per-domain rates are available; confirm multi-client support and commercial terms.
Palisade’s figures are derived from its published tiers. DMARCPal pricing or licensing source reference: vendor source citation date 2026-10-13. Plans and prices may have changed since.
How DMARCPal prices
- The public pricing page embeds this official pricing widget. These rates are the widget’s explicit USD selection, not currency-converted estimates.
- The widget also offers CAD, EUR, AUD, NZD and GBP; select a currency before comparing a budget. All three cards list unlimited users and unlimited reports; unlimited reports is not an unpublished email-volume or response-SLA guarantee.
How Palisade prices
- Palisade publishes flat IT-team plans sized by email volume at $19, $29, $59, $99, and $249 per month; annual billing is 20% lower.
- Palisade paid IT tiers include 2, 3, 6, 10, or 20 set-up domains by plan. Adding domains is free and unlimited; only domain setup counts against the tier.
- Palisade IT-team and MSP plans include unlimited report history (Enterprise retention follows custom terms), and API access is included on every plan. MSPs pay per client domain at a portfolio-based rate, with a minimum of 5 client domains and a free Not-For-Resale domain for the MSP's own use.
- Palisade offers a 15-day full-product trial.
DMARCPal source reference: primary reference citation date 2026-10-13.Palisade source reference: the public pricing page citation date 2026-08-26.Plans and prices may have changed since.
Start a 15-day full-product trial of Palisade. Nothing is charged until it ends.
What each one covers, and where it stops
Published facts only, read from each vendor's own material. Neither column describes a hands-on trial, because we have not run one.
DMARCPal is a focused DMARC reporting and DNS-checking tool for email administrators. It processes aggregate reports in a browseable, searchable interface, with activity charts, provider and record explorers, and Domain Health Check for DMARC, SPF, and DKIM. Its selector tool supports stale-key review, while monitoring sends email alerts for DNS authentication issues.
DMARCPal is aimed at technical teams that review DMARC, SPF and DKIM evidence and make DNS changes themselves. Its public pricing widget lists Lite US$6.95, Standard US$9.95 and Premium US$17.95 per domain/month with USD selected. Retention is 3 months, 1 year and 3 years respectively; every card lists unlimited users and reports. The parent pricing page advertises a 14 day no-card trial; a separate MSP rate is not published in the reviewed packet.
Palisade is built around an agent that does the DMARC work rather than reporting on it. It identifies every sending source, drafts the SPF and DKIM changes each one needs, and proposes the next policy step when the evidence supports it.
The agent investigates every sender, drafts every fix, and proposes each policy step, you approve before anything ships.
- Provides searchable report review
- Provides activity charts and email-source geolocation
- Provides provider and record views
- Provides DNS record health checks
- Provides email alerts for DNS issues
- The agent investigates senders and drafts the fix, so the work arrives prepared rather than as a list of findings
- Hosted SPF, DKIM and DMARC records, so an approved change can be carried out rather than handed off
- Portfolio workflow for MSPs, with ConnectWise, HaloPSA and Autotask integrations and a free NFR domain
- An MCP server and a REST API, so the same data and workflow are reachable from the AI tools a team already uses
- Does not advertise an AI agent that investigates senders, drafts fixes, and proposes policy steps for approval
- Does not advertise automated DNS changes after customer approval
- Does not advertise hosted SPF, DKIM, DMARC, or BIMI records
- Does not advertise native ConnectWise, HaloPSA, or Autotask integrations
- Every policy change waits for a human approval, by design: nothing ships on the agent's own authority
- MSP pricing is portfolio-based per client domain, with a minimum of 5 client domains
- Plans are sized by monthly email volume, so a low-domain, high-volume sender lands on a higher tier than domain count alone suggests
- Starts at
- US$6.95/domain/month
- Free trial
- 14 days, no credit card required
- Public plans
- Lite, Standard, Premium
- Plan limits
- 3 months to 3 years retention; unlimited users/reports
- MSP model
- Not published
- Starts at
- IT plans from $19/mo by email volume; 15-day trial
- Trial
- 15 days, full product
- MSP model
- Portfolio-based per client domain; minimum of 5 client domains
What Palisade customers say
5.0 out of 5 on G2Trusted by over 10,000 domains
“Palisade made it so easy for us to get our blue verified checkmark and achieve our BIMI compliance”
Sources and further reading
Source checks run through 2026-10-13; every entry keeps its individual check date.
- DMARCPal product
Checked 2026-08-28
- DMARCPal pricing
Checked 2026-08-28
- DMARCPal homepage and public navigation (rechecked)
Checked 2026-08-27
- DMARCPal DMARC explanation and setup guidance
Checked 2026-08-26
- DMARCPal monitoring setup guide
Checked 2026-08-26
- DMARCPal support
Checked 2026-08-28
- Palisade pricing
Checked 2026-08-26
- DMARCPal deployment process
Checked 2026-08-28
- DMARCPal survey and adjust stage
Checked 2026-08-28
- Source
Checked 2026-10-13
Palisade vs DMARCPal: FAQ
What is DMARCPal?
DMARCPal is a DMARC reporting and implementation tool. Its public product page describes aggregate report processing, charts and statistics, provider and record explorers, Domain Health Check, DKIM selector analysis, monitoring alerts, and unlimited domains and users. It is aimed at email administrators who want a readable view of DMARC, SPF, and DKIM data.
How much does DMARCPal cost?
With USD selected, DMARCPal lists Lite at US$6.95, Standard at US$9.95 and Premium at US$17.95 per domain/month. The three tiers have 3 months, 1 year and 3 years retention, respectively. Its parent pricing page advertises a 14 day trial with no card required. Select the correct currency and tier before comparing the cost. Source (2026-10-13)
Does DMARCPal offer a free trial?
Yes. DMARCPal advertises a 14-day free trial, says no credit card is required, and says you can cancel at any time. Its public pages do not explain whether the trial has a report-volume or feature restriction, so confirm the trial scope if you need Premium tools or a multi-domain evaluation.
Does DMARCPal change DNS records for me?
DMARCPal's public setup guidance shows a DMARC record and tells the reader to paste it into their own DNS hosting service. The public product pages do not advertise automated DNS changes or an approval-based enforcement agent. Plan for an operator to make the DNS changes unless DMARCPal confirms a different account-specific workflow.
Does DMARCPal have an MSP or PSA workflow?
DMARCPal advertises unlimited domains and users, but its public product, pricing, and support pages do not advertise a separate MSP portal, white-label reporting, or native ConnectWise, HaloPSA, or Autotask integrations. An MSP should confirm tenant separation, client reporting, ticketing, API access, support, and partner pricing directly before committing to a fleet rollout.
What is the main difference between DMARCPal and Palisade?
DMARCPal focuses on processing and exploring DMARC reports, checking DNS records, and alerting users to issues. Palisade's AI agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step toward p=reject; your team approves before anything ships. The choice is mainly about who carries the investigation and fix-preparation work after a report identifies a problem.
Switching from DMARCPal takes three steps
- 1
Batch-import your domains
Bring your client domains into Palisade in bulk, or let your ConnectWise, HaloPSA, or Autotask integration sync them automatically.
- 2
Run both platforms in parallel
Keep both reporting destinations configured during the overlap, verify external-report authorization where required, and confirm reports arrive in both platforms before retiring DMARCPal. Review hosted-record dependencies before changing DNS.
- 3
Cut DNS over on your schedule
Point records at Palisade's hosted infrastructure, then retire the old setup when you're satisfied.
15-day full-product trial. Nothing is charged until it ends.
Source citations on this page run through 2026-10-13; individual claims retain their dates and evidence limitations. Spotted something out of date? Tell us and we'll fix it.