Docker DMARC Reports vs Palisade in 2026
Docker DMARC Reports combines an IMAP report fetcher, a relational database, and a web viewer that you run yourself. Palisade is agentic: its agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step toward enforcement for your approval.
Our verdict: Pick Docker DMARC Reports if you want a public self-hosted Docker image that collects DMARC report mail into your own database and gives a technical operator a local web viewer. Pick Palisade if you want a hosted DMARC service whose agent investigates senders, drafts authentication changes, and carries domains toward p=reject with your approval at every step.
1 domain free up to 1,000 emails/month


Palisade is free for one domain, up to 1,000 emails a month. Paid IT-team plans are sized by email volume. Start a 15-day full-product trial with no credit card.
Which one is right for you?
Best for Teams that want the report pipeline under their infrastructure boundary
Best for MSPs and IT teams responsible for multiple domains
- You want the report mailbox, container, database, and web endpoint under your team's infrastructure boundary.
- You have an operator who can configure IMAP and DNS, secure the exposed HTTP service, maintain the database, and own upgrades and backups.
- You prefer a public Docker image with no published vendor subscription and can accept that the project does not advertise commercial support, an MSP control plane, or a managed enforcement workflow.
- You want an AI agent to investigate every sender, draft SPF and DKIM fixes, and propose policy steps toward p=reject instead of stopping at report visualization.
- You want hosted SPF, DKIM, DMARC, BIMI, and MTA-STS records on redundant managed DNS, with Smart DNS Deployment available through your DNS provider.
- You run an internal IT team or MSP and want multi-tenant operations, native ConnectWise, HaloPSA, or Autotask integrations, and pricing that matches your domain portfolio.
Free for one domain, up to 1,000 emails a month. Paid IT-team plans are sized by email volume. Start a 15-day full-product trial with no credit card.
Where the day-to-day work actually differs
| Feature | Docker DMARC Reports | Palisade |
|---|---|---|
| Report collection and analysis | ||
| DMARC aggregate report parsing and web visualizationWhether aggregate reports are parsed and shown in a web viewer.The README says the image combines a DMARC report parser with a report viewer, fetches report mail from IMAP, stores it in a database, and visualizes it through a webserver/PHP module (checked 2026-08-26). Source (2026-08-26) | IMAP parser and viewer | Agent analyzes reports |
| Scheduled IMAP mailbox collectionWhether a connected IMAP mailbox is polled on a recurring schedule.The README documents recurring IMAP retrieval at 15 minutes past each hour, with the first report potentially taking up to one hour to arrive in the viewer (checked 2026-08-26). Source (2026-08-26) | Hourly IMAP retrieval | Not offered |
| MySQL and PostgreSQL deployment examplesWhether the application includes database deployment examples.The repository publishes separate Docker Compose templates for MariaDB/MySQL and PostgreSQL (checked 2026-08-26). Source (2026-08-26) | Database Compose templates | Not offered |
| Manual command to fetch and parse reports on demandWhether report retrieval and parsing can be run from a manual command.The README documents a docker compose exec command that invokes dmarcts-report-parser.pl to fetch and parse reports manually (checked 2026-08-26). Source (2026-08-26) | Manual parser command | Not offered |
| Enforcement and operations | ||
| AI agent that investigates senders, drafts authentication fixes, and proposes policy steps toward p=rejectWhether an AI agent investigates senders, drafts fixes, and proposes policy steps.The public README documents report collection, parsing, storage, and viewing; it does not advertise an AI enforcement agent or a workflow that drafts SPF/DKIM changes (checked 2026-08-26). Source (2026-08-26) | Not advertised | Agent drafts and proposes |
| Hosted DMARC, SPF, DKIM, BIMI, and MTA-STS recordsWhether the provider hosts email-authentication and transport records.The setup instructions tell the operator to create the DMARC TXT record for the reporting mailbox at their own DNS host; hosted authentication records are not advertised (checked 2026-08-26). Source (2026-08-26) | No hosted records | Hosted on managed DNS |
| Native ConnectWise, HaloPSA, or Autotask integrationsWhether the named PSA platforms connect through native integrations.The public materials document Docker, IMAP, database, environment-variable, and reverse-proxy configuration, but do not advertise PSA integrations (checked 2026-08-26). Source (2026-08-26) Source 2 (2026-08-26) | Not advertised | Native PSA integrations |
| Limits and service model | ||
| Unlimited report retention managed by the productHow long report history is retained by the product.The README and Compose examples document database storage but do not publish a report-retention period, retention tier, or managed retention policy (checked 2026-08-26). Source (2026-08-26) Source 2 (2026-08-26) | No managed retention | Unlimited paid-plan retention |
| Portfolio-oriented multi-tenant client managementWhether client domains are organized for multi-tenant operations.The public project materials describe one self-hosted report application and do not advertise tenant isolation, client workspaces, white-label reporting, or MSP operations (checked 2026-08-26). Source (2026-08-26) | No client workspaces | Multi-tenant client management |
| Published commercial subscription pricing and vendor support plansWhether commercial pricing and vendor support plans are publicly published.The GitHub repository and Docker Hub image page publish the image and run instructions but do not advertise subscription prices, paid support plans, or an SLA (checked 2026-08-26). Source (2026-08-26) Source 2 (2026-08-26) | No commercial plans | Published plans and trial |
| AI and automation access | ||
| Documented REST or GraphQL API for report dataWhether customers can build against a published REST or GraphQL reference.Docker DMARC Reports does not advertise a customer REST or GraphQL API reference in its public README, which documents IMAP collection, MySQL storage, a webserver/PHP viewer, Docker setup, and a manual parser command (checked 2026-08-27). Source (2026-08-27) | No API reference listed | REST API published |
| MCP server for connecting AI assistants to report dataWhether an AI assistant can reach report data through a published MCP server.Docker DMARC Reports does not advertise an MCP server or an AI-assistant integration in its public README or Docker Hub overview, which describe a self-hosted parser, database, and web viewer (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27) | No MCP server listed | MCP server published |
| Advertised AI features for report review or remediationWhether the project advertises AI or machine-learning features for report review or DMARC remediation.Docker DMARC Reports does not advertise AI or machine-learning features in its public project materials. The README and Docker Hub overview describe automated IMAP report parsing, MySQL storage, and report visualization instead (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27) | No AI features listed | Agent drafts fixes |
| Report data outside the web viewerWhether a published mechanism lets an operator reach report data without the viewer.Docker DMARC Reports stores fetched reports in a MySQL database that the operator creates. It does not advertise scheduled exports, webhooks, or a data-feed endpoint (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27) | Operator-owned MySQL data | REST API published |
Want to compare the workflow yourself? Try Palisade free with one domain and up to 1,000 emails a month.
Palisade 96 vs Docker DMARC Reports 46, and why
Both products are scored on the same eight dimensions the comparison hub uses, so the figures here are the figures there. Four are derived from vendor facts that each carry a source and a checked date. Four are editorial, marked as such below, and each states its reasoning and its source.
Each dimension is out of 10 and the total is the raw sum out of 80, rescaled to 100 — the raw figure is printed beside it so the conversion is checkable rather than a black box. Scored on what each vendor publishes, not on how the product feels in use. Editorial dimensions last reviewed 2026-08-30.
How reachable the product is from your own software and AI tools. 10 = a documented API on every plan plus a published MCP server. 6 = an API, gated to a tier or to a sales conversation. 3 = no programmatic access advertised.
The project publishes a browser interface but no documented API or MCP server (checked 2026-08-28). Source (2026-08-28)
Palisade publishes a REST API and a remote MCP server on every plan, making the same domain data and remediation workflows available to connected software. Source (2026-08-30)
How much of the report analysis is done for you. 10 = the platform turns raw report data into a prioritised, actionable queue on its own.
Scheduled IMAP collection, parsing, SQL storage, and a browser viewer automate ingestion while leaving analysis and remediation to the operator. Source (2026-08-28)
Report data is analysed into a prioritised list of sender, SPF, DKIM and DMARC issues, so nobody reads raw XML. Source (2026-07-29)
How much of the work the vendor's own software does. 10 = it identifies the sending sources, drafts the SPF and DKIM fixes each one needs, and proposes the next policy step. 6 = it applies the records for you, but a person decides what to fix and when to advance. 3 = it reports, and every change is yours to make. A vendor whose team does the work rather than its software scores here on the software alone.
The container collects and parses reports for its browser viewer, while every sender investigation, SPF or DKIM fix, DNS change, and policy step remains yours to carry out. Source (2026-08-28)
The agent investigates each sender, drafts the SPF and DKIM changes it needs, and proposes the next policy step; a human approves before deployment. Source (2026-08-30)
10 = full pricing published. 6 = some tiers published, rest quote-gated. 3 = quote only.
The source and container image are publicly available; no commercial subscription tiers are published. Source (2026-08-28)
Published: free plan, then flat monthly plans by email volume from $19/mo Source (2026-08-30)
10 = hosts the records for you. 6 = partial or add-on. 3 = you manage your own DNS.
The project collects and displays reports and does not host authentication records. Source (2026-08-28)
10 = a genuine free plan. 6 = time-limited trial only. 3 = no free access.
The complete self-hosted container is publicly available without a vendor subscription. Source (2026-08-28)
Free plan: one domain, up to 1,000 emails/mo, 14-day report history, no credit card, plus a 15-day full-product trial Source (2026-08-30)
10 = a real MSP program with multi-tenant management. 6 = partial. 3 = none.
No commercial MSP programme or hosted partner service is published for this self-hosted container. Source (2026-08-28)
How much work it takes to get a domain from p=none to p=reject. 10 = the platform (or the vendor's team) gets you there without manual DNS edits.
The project parses and displays reports but does not host records, change DNS, simulate policy, or guide enforcement. Source (2026-08-28)
The DMARC Agent detects when a domain's authentication and alignment are ready for the next policy stage and proposes the move, but a human still approves and applies it, so it is not fully hands-off. Source (2026-07-29)
Self-hosted reporting vs managed action
Docker DMARC Reports keeps the parser, database, and viewer in your stack
Docker DMARC Reports is a practical assembly of two open-source components inside a runnable image: the README describes a DMARC report parser, a report viewer, IMAP collection, database storage, and a webserver/PHP interface. The operator creates a DMARC record that points reports to an IMAP mailbox, supplies database credentials, runs the container, and opens the viewer on port 80 or 443. That is genuine parity for the evidence-collection part of a DMARC program. Source (2026-08-26) Source 2 (2026-08-26)

The boundary is equally clear. The public instructions explain how to get report data into a local viewer; they do not advertise sender investigation, authentication-record drafting, or policy automation. Palisade starts with the same evidence and does the follow-up work: its agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step toward p=reject, with approval required before anything ships. Source (2026-08-26)
- IMAP parser and viewer
- Hourly IMAP retrieval
- Database Compose templates
- Agent analyzes reports
- Not offered
- Not offered
Hourly retrieval vs immediate visibility
The hourly IMAP schedule makes collection simple, but not instantaneous
The README's collection model is mailbox-first. New DMARC reports are fetched every 15 minutes past the hour, every hour, and the project warns that the first report can take up to one hour to be fetched. The environment example exposes the mailbox server, port, user, password, read folder, processed folder, error folder, SSL/TLS settings, and XML size limit, so the deployment is configurable without changing the image. Source (2026-08-26) Source 2 (2026-08-26)
That rhythm is a reasonable fit for a technical operator who already owns a report mailbox and does not need a managed control plane. It also leaves the timing, mailbox health, credentials, and failed-import follow-up with that operator. Palisade's hosted workflow is aimed at the next question after collection: which senders are legitimate, what authentication needs changing, and which reviewed policy step is ready across each domain. Source (2026-08-26) Source 2 (2026-08-26)
Deployment choice vs client operations
MySQL or PostgreSQL Compose templates solve deployment, not client operations
The project gives a small team useful deployment choices. Its examples include separate Compose files for a MariaDB/MySQL database and PostgreSQL, with a persistent database volume, a health check, a restart policy, and the application container's environment variables. The README also documents processed and error IMAP folders and a manual parser command for an on-demand refresh. An engineer can see the main moving parts before wiring them together. Source (2026-08-26) Source 2 (2026-08-26)
The examples are deployment recipes, not an MSP service design. The public materials do not advertise per-client domains, tenant isolation, white-label reports, ticket creation, or PSA integrations. An MSP could build those layers around a self-hosted stack, but the repository does not supply them as a product surface. Palisade includes multi-tenant client management and native ConnectWise, HaloPSA, and Autotask integrations for MSP accounts, so the comparison turns on whether your team wants to assemble the service wrapper or buy it as part of the platform. Source (2026-08-26) Source 2 (2026-08-26)
Native PSA integrations
Palisade imports client domains straight from these three. Docker DMARC Reports's own coverage is stated above, from their site.
- ConnectWise PSA
- Autotask
- HaloPSA
- Not advertised
- No hosted records
- Not advertised
- Agent drafts and proposes
- Hosted on managed DNS
- Native PSA integrations
- Investigates. Works out what is sending as your domain, and which of it is legitimate.
- Drafts the fix. Prepares the SPF and DKIM record changes each sender needs, rather than describing them.
- Proposes the policy step. Moves toward p=reject when the evidence supports it. You approve before anything ships.
Vendor savings vs operator costs
What the public image costs—and what the operator still owns
Docker DMARC Reports does not publish a subscription price because its public distribution model is a Docker image that you run yourself. The repository and Docker Hub page show how to pull the image and connect it to an IMAP mailbox and database, but do not advertise hosted accounts, commercial support, a retention promise, or an SLA. The cost boundary therefore moves from vendor billing to your infrastructure: the host, database, mailbox, endpoint security, backups, updates, and time spent keeping imports and reports healthy. Source (2026-08-26) Source 2 (2026-08-26)
Palisade's price buys a different operating model. Internal IT teams can start with a free one-domain plan or use flat monthly email-volume tiers from $19/month. MSPs pay per client domain at a portfolio-based rate, with no client email metering and a free NFR domain. The fair comparison is not only a $0 vendor fee against a subscription. It is also whether your team wants to operate the report pipeline and translate findings into DNS work, or wants an agent to prepare that work for human approval. Source (2026-08-26)
What each side charges
Three points on each published range: the cheapest plan, one in the middle, and the top of what the vendor publishes. Every plan on both sides is in the pricing section further down.
- Self-hosted Docker imageNo vendor subscription published
Public image and Compose examples; you provide the IMAP mailbox, Docker host, database, secure HTTP or reverse-proxy endpoint, backups, upgrades, monitoring, and operational support
- Free$0
1 domain, your own, capped at 1,000 emails/mo
- IT teams: up to 500,000 emails/mo$59/mo ($47/mo billed annually)
Same product: 6 set-up domains, pick the tier that matches your sending
- Enterprise (more than 2.5M / month)Custom
Custom volume, retention, and terms
- No managed retention
- No client workspaces
- No commercial plans
- Unlimited paid-plan retention
- Multi-tenant client management
- Published plans and trial
Dashboard access vs programmatic access
Docker DMARC Reports stores data in MySQL but lists no API or MCP server
Docker DMARC Reports publishes a self-hosted report pipeline: it retrieves DMARC mail from IMAP, stores it in MySQL, and shows it through a webserver/PHP viewer. The public README and image overview cover Docker deployment, configuration, report parsing, and manual updates. They do not advertise a REST or GraphQL API reference, an MCP server, an AI-assistant integration, or AI or machine-learning features. The project also does not advertise scheduled exports, webhooks, or a data-feed endpoint; data remains in the MySQL database that the operator provides (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27)
Palisade publishes an MCP server and a REST API. Its agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step. A human approves before anything ships.
Reachable from your own AI tools
Palisade's MCP server exposes 30 tools over OAuth, so the assistant your team already uses can read domains, pull the exact records to publish and work the task queue. These are the clients the connection guide walks through.
- Claude
- ChatGPT
- Cursor
- Windsurf
- Any MCP client
- No API reference listed
- No MCP server listed
- No AI features listed
- REST API published
- MCP server published
- Agent drafts fixes
Still deciding between Docker DMARC Reports and Palisade? See what changes with Palisade.
1 domain free up to 1,000 emails/month
The agent does the heavy lifting
Sources identified, SPF and DKIM fixes drafted, each policy step proposed. You approve; nothing ships on its own.
Connect your AI with MCP
30 tools over MCP, so your assistant reads your domains and works the queue.
Connect your DNS manager directly
Approved records go into your own zone at your own provider, across 64. No credentials reach us.
“We evaluated many DMARC providers before choosing Palisade. The quality of their product, the responsiveness and friendliness of their team and their rapid progress on their product roadmap made it a no-brainer for us to move forward.”
Docker DMARC Reports pricing: no subscription, but infrastructure is yours
Docker DMARC Reports is published as a self-hosted Docker image rather than a hosted subscription. The maintainer's README and Docker Hub page explain how to run it, but neither page publishes a commercial plan, trial, or support tier. The relevant price comparison is therefore license and vendor fee versus the infrastructure and operator work your deployment requires.
What you'd actually pay
The same five buyer sizes on every comparison, so a shape carries from one page to the next.
1 domain, up to 1,000 emails a month
2 set-up domains, up to 100K emails a month
10 set-up domains, up to 1M emails a month
20 set-up domains, up to 2.5M emails a month
Client domains under management, any volume
Palisade’s figures are derived from its published tiers. Docker DMARC Reports figures read from their pricing page on 2026-08-28. Plans and prices may have changed since.
How Docker DMARC Reports prices
- The project does not publish a SaaS pricing page, paid tier, commercial support plan, trial, domain limit, message limit, or SLA (checked 2026-08-26).
- The repository's current README identifies parser and viewer builds dated 2024-02-04 and documents image tags including latest, 1.0, 1.4, and the older 0.5 image. Those version notes are not a support commitment (checked 2026-08-26).
- Docker Hub lists the image as updated over two years ago when checked on August 26, 2026. That is a registry freshness signal, not proof that the image is unusable or supported.
- A missing subscription fee does not make operation costless. Hosting, database storage, mailbox access, TLS, backups, patching, and the time to investigate failed imports remain the operator's responsibility; this is an operating-cost inference from the self-hosted model, not a vendor price claim.
How Palisade prices
- Palisade publishes a Free plan for one domain and up to 1,000 emails/month, plus flat monthly IT-team plans sized by email volume from $19/month. Paid IT tiers cap set-up domains at 2, 3, 6, 10, or 20 by tier; adding domains is free and unlimited.
- Palisade's MSP model is quoted per client domain, with a rate that improves as your portfolio grows. Client email volume is not metered, and your own MSP domain is included as a free Not-For-Resale license.
- Palisade is hosted, so the service includes the managed report and DNS surface instead of asking your team to assemble an IMAP mailbox, container, database, HTTP endpoint, and maintenance process. Its agent investigates senders, drafts fixes, and proposes policy steps while your team approves each change.
- Palisade offers a 15-day full-product trial without a credit card. The free plan keeps 14 days of report history, while paid plans have unlimited retention.
Docker DMARC Reports pricing read from their public pricing page on 2026-08-26.Plans and prices may have changed since.
Try Palisade free on one domain, or start a 15-day full-product trial with no credit card.
What each one covers, and where it stops
Published facts only, read from each vendor's own material. Neither column describes a hands-on trial, because we have not run one.
Docker DMARC Reports is a self-hosted Docker image for technical teams that want to fetch DMARC aggregate reports from an IMAP mailbox, store them in their own relational database, and review them through a local web viewer. It includes scheduled retrieval, manual parser commands, and Compose examples for MySQL and PostgreSQL deployments.
The project is aimed at operators prepared to run the report mailbox, container, database, and web endpoint within their infrastructure boundary. It is published as a self-hosted image rather than a hosted subscription. Its materials do not publish a commercial plan, trial, paid support tier, or vendor SLA, so backups, upgrades, security, and operational support stay with the team.
Palisade is built around an agent that does the DMARC work rather than reporting on it. It identifies every sending source, drafts the SPF and DKIM changes each one needs, and proposes the next policy step when the evidence supports it.
The agent investigates every sender, drafts every fix, and proposes each policy step, you approve before anything ships.
- Provides an IMAP parser and web viewer for DMARC aggregate reports
- Provides hourly IMAP retrieval
- Provides database Compose templates for MySQL and PostgreSQL
- Provides a manual parser command for on-demand report retrieval and parsing
- Stores report data in an operator-owned MySQL database
- The agent investigates senders and drafts the fix, so the work arrives prepared rather than as a list of findings
- Hosted SPF, DKIM and DMARC on redundant managed DNS, so an approved change can be carried out rather than handed off
- Portfolio workflow for MSPs, with ConnectWise, HaloPSA and Autotask integrations and a free NFR domain
- An MCP server and a REST API, so the same data and workflow are reachable from the AI tools a team already uses
- Does not advertise an AI agent that investigates senders, drafts authentication fixes, and proposes policy steps toward p=reject
- Does not advertise hosted DMARC, SPF, DKIM, BIMI, or MTA-STS records
- Does not advertise named ConnectWise, HaloPSA, or Autotask integrations
- Does not advertise portfolio-oriented multi-tenant client management
- Does not publish commercial subscription pricing, paid support plans, or a vendor SLA
- Every policy change waits for a human approval, by design: nothing ships on the agent's own authority
- MSP pricing is quoted per client domain rather than published as a rate card
- Plans are sized by monthly email volume, so a low-domain, high-volume sender lands on a higher tier than domain count alone suggests
- Starts at
- No vendor subscription published
- Deployment
- Self-hosted Docker image
- Support plan
- Not published
- Report retention
- Not published
- MSP model
- Not published
- Starts at
- Free, then $19/mo
- Free tier
- 1 domain, up to 1,000 emails/month
- Trial
- 15 days, full product, no credit card
- MSP model
- Quoted per client domain, portfolio-based
“Palisade made it so easy for us to get our blue verified checkmark and achieve our BIMI compliance”
Sources and further reading
Source checks run through 2026-08-26; every entry keeps its individual check date.
- Docker DMARC Reports project README
Checked 2026-08-26
- Docker Hub image overview and tags
Checked 2026-08-26
- Docker Compose deployment examples
Checked 2026-08-26
- Environment variable reference
Checked 2026-08-26
- Docker DMARC Reports README: AI and access review
Checked 2026-08-27
- Docker Hub image overview: AI and access review
Checked 2026-08-27
- Docker DMARC Reports Compose examples: AI and access review
Checked 2026-08-27
- Docker DMARC Reports environment reference: AI and access review
Checked 2026-08-27
Palisade vs Docker DMARC Reports: FAQ
What is the main difference between Docker DMARC Reports and Palisade?
Palisade is agentic DMARC software. Its agent investigates sending sources, works through SPF and DKIM alignment, and moves domains toward p=reject while your team stays in control. When evaluating Docker DMARC Reports, compare that operating model with the workflow in its current product documentation and decide how much work you want your team to carry.
Who should choose Palisade?
Choose Palisade if you want an AI agent to carry routine DMARC work through enforcement, whether you manage one domain or thousands. It is also a natural fit for teams already using Claude, OpenAI, or other AI tools to get operational work done.
Who should choose Docker DMARC Reports?
Choose Docker DMARC Reports if its current integrations, procurement model, or operating workflow better match your requirements. A more operator-led platform can also fit a team that prefers to review reports and make each change itself.
Does Palisade guarantee a specific time to p=reject?
No responsible DMARC platform should promise the same enforcement timeline for every domain. Timing depends on the number of sending sources, access to DNS and third-party systems, and how quickly each legitimate stream can be aligned. Palisade's agent reduces routine investigation and configuration work while operators retain control over policy decisions.
Switching from Docker DMARC Reports takes three steps
- 1
Batch-import your domains
Bring your client domains into Palisade in bulk, or let your ConnectWise, HaloPSA, or Autotask integration sync them automatically.
- 2
Run both platforms in parallel
DMARC reporting supports multiple recipients, so Palisade and Docker DMARC Reports receive the same reports during the overlap window. Nothing breaks while you compare.
- 3
Cut DNS over on your schedule
Point records at Palisade's hosted infrastructure (redundant managed DNS), then retire the old setup when you're satisfied.
Our onboarding team handles the technical transition with you.
Competitor information on this page was last reviewed against public sources on 2026-08-26. Spotted something out of date? Tell us and we'll fix it.



