DMARC agent that does the work for busy MSPs

Yes. Every client domain sits in one dashboard, with per-client separation for reporting and access, from a handful of domains to thousands. You get domain groupings, team permissions, client portal access, Microsoft and Google SSO, and role-based controls. One account per client multiplies logins and billing, and makes it harder to spot the same spoofing campaign across your book.

MSPs pay per client domain, with a rate that improves as your portfolio grows. Your own MSP domain is included as a free Not-For-Resale license. The more client domains you run, the less each one costs. Client email volume is not metered either, so a client's growth costs you nothing extra. Book a call and we will quote against your portfolio.

Yes. Your own MSP domain is free as a Not-For-Resale license: run Palisade on your own environment before rolling it out to a single client. No credit card at signup, and none for the 15-day trial.

No. Adding domains is free and unlimited on every plan. Bulk-import a client's whole portfolio and read the audit without paying anything. Billing applies to setting a domain up, not to adding it.

ConnectWise PSA, Autotask and HaloPSA, on MSP accounts. Client domains import straight from the PSA you already run. Need more than the native integrations? The API and the MCP server are free on every plan, documented at developer.palisade.email.

Yes. White-label reports go out under your brand, ready to put in front of a client at a QBR. Prospecting reports do the same for accounts you have not won yet.

Only once, to delegate. Palisade hosts SPF as an include, and DKIM, DMARC, BIMI and MTA-STS through CNAME delegation. After that, changes happen in Palisade instead of at each client's DNS host. That is what makes key rotation and SPF upkeep survivable across a book of clients.

This is the number one fear, and it is a fair one: badly done DMARC really does fail legitimate mail. Palisade starts every domain at p=none, which collects data without touching delivery. The agent proposes enforcement only once every legitimate sender authenticates, and you can see exactly which messages would have been affected before anything changes. Nothing ships without your approval.

Yes, and you do not have to cut over blind. A DMARC record takes multiple rua recipients, so both platforms receive the same reports while you run them in parallel. When Palisade shows the same senders you were tracking, drop the old address.