Kevlarr vs Palisade in 2026
Kevlarr combines DMARC monitoring, AI filtering, an implementation wizard, and a multi-tenant MSP dashboard. Current DMARC AI UK pricing advertises a free trial and paid per-domain monitoring. Palisade uses an approval-based AI agent to investigate senders, draft authentication fixes, and propose each policy step for review.
Our verdict: Kevlarr fits MSPs that want AI-filtered DMARC data, customer environments, white-label reporting, and an API-first integration path. Confirm the current regional subscription terms: UK DMARC AI publishes a trial and pricing from £1 per domain per month. Palisade fits teams that want an agent to investigate senders, draft authentication fixes, and propose policy steps for approval.
Samuel Chenard · CEO & Co-Founder, PalisadeSource checks through 2026-10-1515-day full-product trial. Nothing is charged until it ends.
ChatGPT
Claude
Gemini
Perplexity
Grok
Kevlarr
Palisade
Full rubric · 8/8 dimensions established
Full rubric · 8/8 dimensions established
Palisade's IT-team plans start at $19 a month, sized by email volume. Start with a 15-day full-product trial; nothing is charged until it ends.
Which one is right for you?
Best for MSPs with confirmed commercial terms and integration scope
Best for MSPs and IT teams responsible for multiple domains
- You want Kevlarr’s monitoring and sender dashboard, and have confirmed whether the legacy noncommercial offer, current account offer, or UK paid subscription applies to your domains.
- You run an MSP and need a multi-tenant partner dashboard, customer environments, PDF reports, white-label branding, or SSO.
- You prefer an AI-filtered, wizard-led workflow and have confirmed the commercial terms and integration scope with Kevlarr before purchase.
- You want the agent to investigate every sender, draft every fix, and propose each policy step while your team approves before anything ships.
- You need a workflow that turns report evidence into prioritized work, rather than a dashboard where operators decide and execute each remediation step.
- You want published IT-team pricing, free unlimited domain adding, and portfolio-based MSP pricing without client email metering.
IT-team plans start at $19 a month, sized by email volume. Start with a 15-day full-product trial; nothing is charged until it ends.
Where the day-to-day work actually differs
| Feature | Kevlarr | Palisade |
|---|---|---|
| Enforcement workflow | ||
| AI agent that investigates senders, drafts fixes, and proposes policy stepsWhether an AI agent prepares sender fixes and policy steps for approval.DMARC AI advertises named sender identification, exact AI-vetted DNS suggestions, zone-file deployment and a context-aware assistant, plus workflow guidance and hosted DMARC/BIMI. The reviewed pages do not document a full per-change human approval contract or autonomous policy-readiness execution (checked 2026-10-13). Source (2026-10-13) Source 2 (2026-10-13) | AI suggestions; approval contract unverified | Agent drafts and proposes |
| Guided path from monitoring to DMARC enforcementWhether monitoring findings can guide a domain toward DMARC enforcement.Kevlarr describes an implementation wizard that prioritizes domains needing attention, and its current MSP pages describe a workflow from monitoring to enforcement with DNS guidance. Source (2026-08-26) Source 2 (2026-08-26) | Wizard-led DNS steps | Agent proposes policy steps |
| Monitoring and analysis | ||
| DMARC aggregate reporting and sender visibilityWhether DMARC reports identify sending systems and authentication results.Kevlarr says DMARC monitoring identifies the parties and systems sending and forwarding mail on a domain's behalf, and its DMARC page describes daily reports with source and SPF/DKIM status information. Source (2026-08-26) Source 2 (2026-08-26) | Daily sender reports | Agent investigates senders |
| SPF, DKIM, and DMARC configuration analysisWhether SPF, DKIM, and DMARC records are checked for configuration issues.Kevlarr documents checks for the syntactical and technical correctness of DMARC and SPF records, plus implementation support for DMARC, DKIM, and SPF. Source (2026-08-26) Source 2 (2026-08-26) | Record correctness checks | Agent drafts authentication fixes |
| AI filtering for spoofing, forwarding, and irrelevant report dataWhether reporting noise from spoofing and forwarding can be filtered.Kevlarr says its AI-driven filters can omit irrelevant data and filter monitoring data related to spoof attacks or forwarded emails. The current DMARC AI feature page also lists AI filtering for forwarding, spoofing, and DNS noise. Source (2026-08-26) Source 2 (2026-08-26) | Spoofing and forwarding filters | Agent analyzes reports |
| Free access and service | ||
| Free DMARC monitoring for an organization's own domainWhether an organization can monitor its own domain without paying.Legacy Kevlarr pages describe non-commercial monitoring for the user's own domains; MSPs are directed to a separate offer. Confirm current availability and regional eligibility. Current UK pricing advertises a trial, not an ongoing free tier. Source (2026-08-26) Source 2 (2026-08-26) | —Legacy non-commercial offer; confirm availability | 15-day trial instead |
| MSP operations | ||
| Multi-tenant customer and domain managementWhether an MSP can manage separate customers and their domains.Kevlarr advertises an exclusive multi-tenant partner dashboard for onboarding and managing customers, domains, users, and monitoring subscriptions. Source (2026-08-26) | Separate customer dashboard | Multi-tenant MSP workflows |
| Customer environments, PDF reports, and white-label brandingWhether MSPs can give clients branded reporting environments.Kevlarr says an MSP can decide whether customers receive their own environment and PDF reports. Its white-label program provides customer dashboards and reports with the MSP's logo and color codes. Source (2026-08-26) | Branded client reporting | White-label client reports |
| API-first integration and SSO supportWhether integrations and user access can connect to an MSP's systems.Kevlarr describes the application as API-first and says partners can integrate all or part of the dashboard, their own user database, and access control through the SSO module. Source (2026-08-26) | Custom integration plus SSO | API and PSA integrations |
| Named ConnectWise, HaloPSA, or Autotask integrationsWhether the named PSA platforms have direct product integrations.Kevlarr advertises API-first integration, SSO, and a custom integration path, but the public product, partner, pricing, and technology pages reviewed do not advertise named ConnectWise, HaloPSA, or Autotask connectors (https://www.kevlarr.io/partners?lang=en, https://www.kevlarr.io/technologieen?lang=en; checked 2026-08-26) | Named PSAs not advertised | Native PSA integrations |
| Hosted records and DNS | ||
| Hosted DNS, DMARC, and BIMI servicesWhether a service hosts DNS and email-authentication records.The current DMARC AI feature page, which is linked from Kevlarr's own For MSPs navigation, advertises hosted DNS, DMARC, and BIMI as a platform feature. Source (2026-08-26) | Managed records platform | Hosted on managed DNS |
| Unlimited report historyHow long paid plans retain DMARC report history.Kevlarr's public monitoring, partner, pricing, and technology pages do not publish a report-retention period or an unlimited-retention promise for paid plans (https://www.kevlarr.io/dmarc-monitoring?lang=en, https://www.kevlarr.io/partners?lang=en, https://www.kevlarr.io/kosten?lang=en; checked 2026-08-26) | —Unlimited report history not established | Unlimited IT/MSP; Enterprise customSource |
| Redundant managed DNS availability termsWhether managed DNS terms document redundancy and availability.Kevlarr advertises hosted DNS on the current DMARC AI feature page, but the public pages reviewed do not publish redundant-DNS architecture or a DNS availability SLA (https://dmarc.ai/features/, https://www.kevlarr.io/kosten?lang=en; checked 2026-08-26) | Redundancy and SLA unpublished | Redundant managed DNS |
| AI and automation access | ||
| Public API reference for programmatic accessWhether a customer can inspect documented REST or GraphQL endpoints before building an integration.Kevlarr advertises API-first dashboard integration for MSPs, but does not advertise a public REST or GraphQL reference or plan-specific API access on the public partner page reviewed (checked 2026-08-27). Source (2026-08-27) | No public reference | REST API published |
| MCP server for connecting AI assistants to domain dataWhether an AI assistant can reach the product's data directly.The current dmarc.ai features page advertises MCP Enabled integration. The reviewed material does not establish a usable endpoint, authentication flow, documented tool scope or plan coverage. Source (2026-10-13) | —MCP advertised; connection details unverified | MCP server published |
| AI filtering for DMARC report noiseWhether the vendor advertises AI that filters monitoring data inside the product.Kevlarr advertises AI-driven filters that omit irrelevant data and filter monitoring data related to spoof attacks and forwarded emails (checked 2026-08-27). Source (2026-08-27) | AI filtering advertised | Agent drafts fixes |
| Integration scope & controls | ||
| Custom MSP application integrationWhether an MSP can bring platform data and workflows into its own application.Kevlarr says MSPs can integrate its full dashboard or selected parts into their own applications. Palisade publishes a REST API for building PSA, RMM, and internal dashboard integrations (checked 2026-08-28). Source (2026-08-28) Source 2 (2026-08-28) | Full or partial dashboard integration | REST API for internal dashboards |
| Identity and access integrationWhether the platform connects to the MSP's identity model and controls what client users can access.Kevlarr says its SSO module can connect the MSP's user database and access control. Palisade publishes Microsoft and Google SSO, team permissions, client portal access, and role-based controls (checked 2026-08-28). Source (2026-08-28) Source 2 (2026-08-28) | User database plus SSO | SSO and role-based controls |
| Published DNS deployment methodHow proposed email-authentication records reach the client's DNS.DMARC AI says it suggests exact DNS changes and can deploy them via Zone files to major registrars. Palisade says the customer authorizes its DNS provider connection and approves each exact record before publication (checked 2026-08-28). Source (2026-08-28) Source 2 (2026-08-28) | Zone files to major registrars | Provider connection after approval |
Want to compare the workflow yourself? Start a 15-day full-product trial of Palisade.
Palisade 86 vs Kevlarr 69, and why
Both products are scored on the same eight dimensions the comparison hub uses, so the figures here are the figures there. Four are derived from vendor facts that each carry a source and a checked date. Four are editorial, marked as such below, and each states its reasoning and its source.
Each dimension is out of 10 and the total is the raw sum out of 80, rescaled to 100 — the raw figure is printed beside it so the conversion is checkable rather than a black box. Scored on what each vendor publishes, not on how the product feels in use. Unknown scoring dimensions are shown as Not established; provisional scores average only established dimensions and show coverage. They may change as remaining dimensions are verified. Current ranks include full and provisional scores; equal displayed scores share a rank. Historical assessments are separate. Editorial dimensions last reviewed 2026-10-15.
Full rubric · 8/8 dimensions established
Full rubric · 8/8 dimensions established
How reachable the vendor's DMARC data is from your own software and AI tools. Two paths count, an API and an MCP server, and each only if it reaches DMARC data (domains, records, reports or sending sources). A path is open when it is documented and included from the cheapest paid plan; gated when it needs a higher tier, an add-on, a sales call or a request, or the vendor does not say which plans include it. 10 = both open. 9 = one open, one gated. 8 = both gated. 7 = one open, the other absent. 6 = one gated, the other absent. 5 = access claimed in marketing only, with no docs or plan listing. 4 = reachable only through a self-hosted tool's own interface or a host platform's API, such as parsedmarc's library or Splunk's REST API; a dashboard over a database you run yourself does not count. 3 = no API or MCP server reaches DMARC data.
DMARC AI's homepage advertises full API access to its data, and its features page advertises MCP. These reviewed pages do not provide API or MCP endpoint and tool documentation or establish plan inclusion, so access is marketed rather than documented in the reviewed evidence (checked 2026-10-14). Source (2026-10-14) Source (2026-10-14)
Palisade publishes a REST API and a remote MCP server on every plan, making the same domain data and remediation workflows available to connected software. Source (2026-08-30)
How much of the report analysis is done for you. 10 = the platform turns raw report data into a prioritised, actionable queue on its own.
AI-driven filtering separates forwarding, spoofing, and actionable cases, and the API-first design supports operational integration. Source (2026-08-29)
Report data is analysed into a prioritised list of sender, SPF, DKIM and DMARC issues, so nobody reads raw XML. Source (2026-08-30)
How much of the work the vendor's own software does. 10 = it identifies the sending sources, drafts the SPF and DKIM fixes each one needs, and proposes the next policy step. 6 = it applies the records for you, but a person decides what to fix and when to advance. 3 = it reports, and every change is yours to make. A vendor whose team does the work rather than its software scores here on the software alone.
DMARC AI advertises named sender identification, exact AI-vetted DNS suggestions, zone-file deployment to major registrars, hosted DMARC/BIMI and a context-aware assistant. The reviewed pages do not document a human approval contract or automatic policy-readiness decision and execution; confirm that operational boundary. Source (2026-10-13) Source (2026-10-13)
The agent investigates each sender, drafts the SPF and DKIM changes it needs, and proposes the next policy step; a human approves before deployment. Source (2026-08-30)
10 = full pricing published. 6 = some tiers published, rest quote-gated. 3 = quote only.
DMARC AI’s UK pricing page advertises prices from £1 per domain per month with volume-based pricing. Exact portfolio rates require confirmation; the page does not publish a full volume-tier schedule. Source (2026-10-13)
Self-service IT-team prices are published by email volume from $19/month; MSP pricing is portfolio-based per client domain, and Enterprise pricing is custom. Source (2026-08-30)
10 = hosts the records for you. 6 = partial or add-on. 3 = you manage your own DNS.
Partial: the current product page publishes hosted DNS, DMARC, and BIMI management, while the reviewed public material does not define delegated record scope or hosted SPF/DKIM coverage. Source (2026-08-29)
Yes: hosted DMARC, SPF, DKIM, BIMI & MTA-STS Source (2026-08-30)
10 = a genuine free plan. 6 = time-limited trial only. 3 = no free access.
The current UK DMARC AI offer provides a free trial rather than a free tier. Source (2026-10-15)
No free plan: a 15-day full-product trial; nothing is charged until the trial ends Source (2026-09-25)
10 = a real MSP program with multi-tenant management. 6 = partial. 3 = none.
Yes: the partner offering publishes a multi-tenant dashboard, client administration, white labelling, API integration, SSO, training, and specialist support. Source (2026-08-29)
Yes: MSP-first, multi-tenant with native PSA integrations Source (2026-08-30)
How much work it takes to get a domain from p=none to p=reject. 10 = the platform (or the vendor's team) gets you there without manual DNS edits.
The implementation wizard prioritizes domain work and combines it with specialist assistance and managed authentication workflows. Source (2026-08-29)
The DMARC Agent detects when a domain's authentication and alignment are ready for the next policy stage and proposes the move, but a human still approves and applies it, so it is not fully hands-off. Source (2026-08-30)
Where Palisade and Kevlarr actually differ
Each argument keeps the product screens, sourced comparison points, and supporting analysis together.
Guidance vs approved execution
Kevlarr's wizard and AI filtering leave a different handoff
Kevlarr's public product story starts with monitoring and triage. Its DMARC monitoring pages describe a view of the parties and systems sending or forwarding mail on a domain's behalf. The partner page adds AI filtering for spoofing and forwarded-email noise, then a DMARC implementation wizard that focuses each customer on the domains requiring attention, starting with the most urgent issues. The current DMARC AI feature page describes the same general shape as a workflow engine with clear actions and DNS guidance. Source (2026-08-26) Source 2 (2026-08-26) Source 3 (2026-08-26)
Kevlarr
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- AI agent that investigates senders, drafts fixes, and proposes policy steps: Agent drafts and proposes
- Guided path from monitoring to DMARC enforcement: Agent proposes policy steps
That is genuine parity on the evidence and guidance layer. The distinction is the handoff after a sender or record issue appears. Kevlarr's older DMARC page says Basic Monitoring presents the data and leaves analysis and action to the user. Its full-service option puts recurring analysis and source identification with Kevlarr specialists. The public material does not describe an agent that investigates each sender, drafts the SPF or DKIM fix, and places the next policy step in an approval queue. Source (2026-08-26) Source 2 (2026-08-26)
Palisade handles that work differently. The agent investigates every sender, drafts every fix, and proposes each policy step. Your team approves before anything ships. It can analyze aggregate reports, identify sender and alignment issues, draft SPF and DKIM changes, file prioritized tickets, detect policy readiness, and carry a domain toward p=reject with each step approved. For a team with many domains, the question is whether the platform leaves a cleaner queue or leaves the investigation and drafting on the operator side. Source (2026-08-26)
Free access vs price certainty
What Kevlarr publishes about free monitoring and MSP pricing
Kevlarr's legacy free-monitoring pages describe periodic reports, notifications and reports on request for the user's own domains, with MSPs directed to a separate offer. Confirm whether that legacy offer is available for your region and account. Current DMARC AI UK pricing instead advertises a free trial followed by paid per-domain monitoring; it does not establish a free multi-client rate card. Source (2026-08-26) Source 2 (2026-08-26)
Kevlarr
A relevant product screenshot was not available in the reviewed evidence.
Palisade
- Free DMARC monitoring for an organization's own domain: 15-day trial instead
Kevlarr’s legacy product and MSP pages describe advanced monitoring, full-service email security, training, specialists, API-first integration, SSO, and white-label reporting. Current DMARC AI UK pricing starts at £1 per domain per month and falls per domain with volume; its exact portfolio rate requires confirmation. Legacy consultancy terms do not establish the current monitoring subscription price. Source (2026-10-13) Source 2 (2026-08-26) Source 3 (2026-08-26) Source 4 (2026-08-26) Source 5 (2026-08-26)
Palisade gives an IT team a rate card it can model before a sales conversation. IT tiers use flat monthly email-volume pricing, and only the number of new domains set up in a subscription tier is capped. Domain adding stays free and unlimited. MSPs receive portfolio-based per-client-domain pricing with a minimum of 5 client domains, a free NFR domain for their own organization, and no client email metering. Kevlarr may still be the right commercial fit, but the quote needs to answer the limits that its public pages leave open. Source (2026-08-26)
What each side charges
Three points on each published range: the cheapest plan, one in the middle, and the top of what the vendor publishes. Every plan on both sides is in the pricing section further down.
- Legacy Kevlarr Basic MonitoringLegacy free non-commercial offer; current availability requires confirmation
DMARC surveillance data presented in a dashboard; analyzing and acting on the data remains the user's responsibility
- Full-service email securityNot published: contact Kevlarr
Kevlarr cybersecurity experts analyze traffic, identify sources, and work with the IT department or IT partners on security improvements
- DMARC AI UK offerFrom £1 per domain/month; volume-based pricing
The current UK pricing page describes a free trial rather than a permanent free tier. Ask for the exact portfolio rate; no global price is established by this regional page.
- IT teams: up to 100,000 emails/mo$19/mo ($15/mo billed annually)
2 set-up domains (adding is unlimited), unlimited retention, every core feature
- IT teams: up to 1,000,000 emails/mo$99/mo ($79/mo billed annually)
Same product: 10 set-up domains, pick the tier that matches your sending
- Enterprise (more than 2.5M / month)Custom
Custom volume, retention, and terms
Service engagement vs agent-led remediation
Kevlarr's MSP dashboard is the clearest fit
Kevlarr is unusually direct about the MSP operating surface. The partner page describes a multi-tenant dashboard where an MSP can onboard and manage customers, domains, users, and monitoring subscriptions. The MSP can decide whether a customer sees its own environment and PDF reports. Kevlarr also advertises a white-label option that applies the MSP's logo and color codes to customer dashboards and reports. Those are meaningful parity points for a provider that sells reporting as part of a managed service. Source (2026-08-26)
Kevlarr
Palisade
- Multi-tenant customer and domain management: Multi-tenant MSP workflows
- Customer environments, PDF reports, and white-label branding: White-label client reports
- API-first integration and SSO support: API and PSA integrations
The same page describes training and access to Kevlarr specialists when an MSP lacks the knowledge or employee time to complete an implementation. That creates a clear service-assisted route. A provider that wants a partner relationship around rollout and client reporting can find that model attractive. The tradeoff is that the public materials do not spell out the boundary between software, specialist help, and billable consultancy. Ask who owns sender investigation, DNS changes, new-sender review, and recurring customer communications in the quote and statement of work. Source (2026-08-26)
Palisade's MSP angle is more agent-led. Client domains can sit in a portfolio, but the core value is the work the agent prepares before the operator reviews it. It investigates senders, drafts authentication changes, files prioritized tickets, and proposes policy readiness. Palisade also supports ConnectWise, HaloPSA, and Autotask for MSP accounts. Kevlarr advertises API-first integration and SSO, but it does not publish those named PSA connectors on the pages reviewed today. An MSP should choose based on its existing service desk and on how much hands-on remediation it wants to retain. Source (2026-08-26) Source 2 (2026-08-26)
Native PSA integrations
Palisade imports client domains straight from these three. Kevlarr's own coverage is stated above, from their site.
- ConnectWise PSA
- Autotask
- HaloPSA
API flexibility vs implementation certainty
The API-first promise stops short of a public integration catalog
Kevlarr says its application is built on an API-first principle. The partner page says an MSP can integrate the full dashboard or selected parts into its own application, connect its user database and access-control model, and use the SSO module. The current DMARC AI site also advertises full API access for sending data to a PSA or custom management portal. That makes integration a stated part of the product direction. Source (2026-08-26) Source 2 (2026-08-26)
Kevlarr
A relevant product screenshot was not available in the reviewed evidence.
Palisade
What Kevlarr does not publish on the public pages reviewed today is a named connector catalog or public API reference that lets a buyer check endpoints, permissions, rate limits, webhook events, or supported PSA objects before the conversation. That is an information gap, not a claim that the API cannot do those things. If your onboarding depends on a particular client-management or billing workflow, ask for the current API documentation and test the exact write path before committing to an integration build. Source (2026-08-26) Source 2 (2026-08-26)
Palisade offers a one-time provider sign-in without retaining credentials, plus optional account connections for Cloudflare, GoDaddy and Route 53. Customers approve every change. Hosted-record delegation is separate and uses record types appropriate to each service; Smart DNS Deployment writes approved records into the customer's own zone. Compare those deployment and credential boundaries with Kevlarr's API and specialist-assisted model. Source (2026-08-26) Source 2 (2026-10-14)
Dashboard access vs programmatic access
Kevlarr API access and MCP availability
Kevlarr promotes API-first integration and an SSO module on its MSP partner page, alongside AI filtering of spoofing and forwarded-message noise. Current DMARC AI features also advertise MCP-enabled intelligence and workflows for external systems. The reviewed feature page does not publish a connection endpoint, authentication procedure, tool contract, or plan-specific MCP entitlement; confirm those details before treating the advertised integration layer as a usable assistant connection. Source (2026-10-13) Source 2 (2026-08-27) Source 3 (2026-08-27)
Kevlarr
A relevant product screenshot was not available in the reviewed evidence.
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- Public API reference for programmatic access: REST API published
- MCP server for connecting AI assistants to domain data: MCP server published
- AI filtering for DMARC report noise: Agent drafts fixes
Palisade publishes an MCP server and a REST API. Its agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step. A human approves before anything ships.
Reachable from your own AI tools
Palisade's MCP server exposes 42 tools over OAuth, so the assistant your team already uses can read domains, pull the exact records to publish and work the task queue. These are the clients the connection guide walks through.
- ChatGPT
- Claude
- Codex
- Cursor
- Windsurf
- Any MCP client
Still deciding between Kevlarr and Palisade? See what changes with Palisade.
15-day full-product trial. Nothing is charged until it ends.
Microsoft 365
Zoho Mail
The agent does the heavy lifting
Sources identified, SPF and DKIM fixes drafted, each policy step proposed. You approve; nothing ships on its own.
Connect your AI with MCP
42 tools over MCP, so your assistant reads your domains and works the queue.
Connect your DNS manager directly
One-time sign-in supports 64 providers without retaining credentials. Optional account connections support Cloudflare, GoDaddy and Route 53. You approve every change.
“We evaluated many DMARC providers before choosing Palisade. The quality of their product, the responsiveness and friendliness of their team and their rapid progress on their product roadmap made it a no-brainer for us to move forward.”
Kevlarr pricing explained (and how Palisade compares)
Kevlarr’s legacy pages describe free noncommercial monitoring, advanced monitoring, full-service email security, and an MSP offering. Current DMARC AI UK pricing publishes a starting rate of £1 per domain per month, with lower per-domain prices as the portfolio grows, and a free trial rather than a permanently free subscription tier. Confirm regional terms, parked-domain treatment, and the portfolio rate before modelling a fleet.
What you'd actually pay
The same five buyer sizes on every comparison, so a shape carries from one page to the next.
1 domain, up to 1,000 emails a month
UK rate; no exact 1-domain price or email-volume tier published
2 set-up domains, up to 100K emails a month
UK rate; no exact 2-domain total or email-volume tier published
10 set-up domains, up to 1M emails a month
UK rate; no exact 10-domain total or email-volume tier published
20 set-up domains, up to 2.5M emails a month
UK rate; no exact 20-domain total or email-volume tier published
Client domains under management, any volume
Volume-based MSP pricing; the exact portfolio rate requires a call
Palisade’s figures are derived from its published tiers. Kevlarr pricing or licensing source reference: vendor source citation date 2026-08-28. Plans and prices may have changed since.
How Kevlarr prices
- The free monitoring page says the offer has no strings attached for non-commercial use. The sign-up page says free monitoring is for the user's own domain or domains and asks MSPs to contact Kevlarr about a special offer.
- The current UK starting price is published, but complete paid tier amounts and exact portfolio prices require confirmation.
- Kevlarr’s partner page directs MSPs to contact Kevlarr for pricing. Confirm the billing basis, implementation fees and any consultancy charges in the quote.
- No paid-plan retention, domain, email-volume, or trial-duration limits are published on the pricing and product pages reviewed today. Confirm those limits in the quote before modelling a fleet.
- The current DMARC AI UK pricing page explicitly describes a free trial instead of a permanently free tier. Older Kevlarr pages retain a non-commercial free-monitoring offer; confirm which offer and region apply before presenting ongoing free access as available.
How Palisade prices
- Palisade publishes flat IT-team plans of $19, $29, $59, $99, and $249/month by email volume, with 20% off annually. New paid subscriptions cap set-up domains at 2, 3, 6, 10, and 20 respectively, while adding domains remains free and unlimited.
- Palisade's MSP model is portfolio-based per client domain, with a rate that improves as the portfolio grows, a minimum of 5 client domains, no public dollar rate card, and the MSP's own domain included as a free Not-For-Resale license.
- Palisade includes unlimited report history on IT-team and MSP plans (Enterprise retention follows custom terms), API access on every plan, and a 15-day full-product trial. Current DMARC AI UK pricing advertises a trial but does not state its duration or a paid report-retention allowance on that page.
- Compare the work model as well as the price. Kevlarr gives an MSP a dashboard, filters, reports, and integration surfaces. Palisade's agent investigates senders, drafts fixes, and proposes policy steps for approval.
Kevlarr source reference: primary reference citation date 2026-10-13.Kevlarr source reference: additional source reference citation date 2026-10-13.Kevlarr source reference: additional source reference citation date 2026-10-13.Kevlarr source reference: additional source reference citation date 2026-10-13.Kevlarr source reference: additional source reference citation date 2026-10-13.Palisade source reference: the public pricing page citation date 2026-08-30.Plans and prices may have changed since.
Start a 15-day full-product trial of Palisade. Nothing is charged until it ends.
What each one covers, and where it stops
Published facts only, read from each vendor's own material. Neither column describes a hands-on trial, because we have not run one.
Kevlarr combines legacy non-commercial DMARC monitoring, AI filtering, a DMARC implementation wizard, and a multi-tenant MSP dashboard. It identifies sending parties and systems, filters spoofing and forwarded-email noise, and guides DNS work toward enforcement. Its Basic Monitoring path presents data in a dashboard, while AI-powered Advanced Monitoring adds filtering that surfaces what needs attention.
Kevlarr’s legacy free monitoring is for non-commercial own-domain use; confirm current availability. It describes separate Advanced Monitoring, full-service email security, and MSP offerings. Its MSP dashboard manages customers, domains, users, monitoring subscriptions, client environments, PDF reports, white-label branding, SSO, and API-first integration. The UK DMARC AI pricing page publishes a starting rate of £1 per domain/month and a free trial; confirm the applicable region and portfolio rate.
Palisade is built around an agent that does the DMARC work rather than reporting on it. It identifies every sending source, drafts the SPF and DKIM changes each one needs, and proposes the next policy step when the evidence supports it.
The agent investigates every sender, drafts every fix, and proposes each policy step, you approve before anything ships.
- Provides wizard-led DNS steps from monitoring to enforcement
- Provides daily sender reports that show sending parties and systems
- Provides record correctness checks for DMARC and SPF
- Provides spoofing and forwarding filters for report data
- Provides a separate customer dashboard for multi-tenant management
- The agent investigates senders and drafts the fix, so the work arrives prepared rather than as a list of findings
- Hosted SPF, DKIM and DMARC records, so an approved change can be carried out rather than handed off
- Portfolio workflow for MSPs, with ConnectWise, HaloPSA and Autotask integrations and a free NFR domain
- An MCP server and a REST API, so the same data and workflow are reachable from the AI tools a team already uses
- Does not advertise an approval agent that prepares sender fixes and policy steps
- Does not advertise named ConnectWise, HaloPSA, or Autotask connectors
- Does not publish a paid-plan report-retention term
- Does not publish redundant DNS architecture or a DNS availability SLA
- Does not advertise a public REST or GraphQL API reference
- Every policy change waits for a human approval, by design: nothing ships on the agent's own authority
- MSP pricing is portfolio-based per client domain, with a minimum of 5 client domains
- Plans are sized by monthly email volume, so a low-domain, high-volume sender lands on a higher tier than domain count alone suggests
- Starts at
- Legacy €0 non-commercial monitoring; confirm availability
- Free tier
- Legacy €0 for non-commercial own-domain use; confirm availability
- Advanced plan
- Not published: contact Kevlarr
- MSP pricing
- Not published: contact Kevlarr
- Consultancy rate
- €150 per hour
- Starts at
- IT plans from $19/mo by email volume; 15-day trial
- Trial
- 15 days, full product
- MSP model
- Portfolio-based per client domain; minimum of 5 client domains
What Palisade customers say
5.0 out of 5 on G2Trusted by over 10,000 domains
“Palisade made it so easy for us to get our blue verified checkmark and achieve our BIMI compliance”
Sources and further reading
Source checks run through 2026-10-15; every entry keeps its individual check date.
- Kevlarr product website
Checked 2026-08-28
- Kevlarr DMARC monitoring
Checked 2026-10-13
- Kevlarr DMARC product options
Checked 2026-08-27
- Kevlarr partner and MSP programme
Checked 2026-10-14
- Kevlarr pricing page
Checked 2026-08-26
- Legacy free-monitoring features and noncommercial terms
Checked 2026-10-13
- Kevlarr technology pages
Checked 2026-08-26
- DMARC AI features
Checked 2026-10-14
- Kevlarr public sitemap
Checked 2026-08-27
- Kevlarr robots file
Checked 2026-08-27
- Kevlarr sitemap index
Checked 2026-08-27
- Kevlarr page sitemap
Checked 2026-08-27
- Kevlarr English sitemap index
Checked 2026-08-27
- Kevlarr English page sitemap
Checked 2026-08-27
- DMARC AI product site
Checked 2026-10-14
- DMARC AI sign-up
Checked 2026-08-29
- DMARC AI pricing philosophy
Checked 2026-10-13
- Current UK trial and commercial terms
Checked 2026-10-15
- Legacy own-domain free-monitoring conditions
Checked 2026-10-13
- Source
Checked 2026-10-13
- Source
Checked 2026-08-28
- Source
Checked 2026-08-28
- Source
Checked 2026-10-13
- Source
Checked 2026-08-26
- Source
Checked 2026-08-26
Palisade vs Kevlarr: FAQ
Is Kevlarr a DMARC monitoring platform?
Legacy Kevlarr pages describe free DMARC monitoring for noncommercial use of your own domains, including visibility into senders and forwarding systems. Confirm whether that legacy offer remains available for your region and account. Current DMARC AI UK pricing advertises a free trial followed by paid per-domain monitoring, rather than an ongoing free subscription tier.
How much does Kevlarr cost?
Current DMARC AI UK pricing starts at £1 per domain per month, with volume-based reductions and a free trial rather than a permanently free subscription tier. Legacy Kevlarr pages separately describe free noncommercial monitoring. Confirm region, domain counts, retention, volume, support, and consultancy terms before purchase. Source (2026-10-13)
Does Kevlarr have an MSP platform?
Yes. Kevlarr advertises a multi-tenant partner dashboard for customers, domains, users, and monitoring subscriptions. MSPs can control customer environments and PDF reports, use white-label branding, access training and specialists, and integrate through an API-first path with SSO.
Does Kevlarr provide an AI enforcement agent?
Kevlarr advertises AI filtering, AI-powered advanced monitoring, an AI assistant, and workflow guidance. Its public pages reviewed for this comparison do not advertise an agent that investigates every sender, drafts every authentication fix, and proposes each policy step for approval. Palisade's agentic workflow is built around that handoff.
Does Kevlarr offer free monitoring?
Legacy Kevlarr pages describe free noncommercial monitoring of the user's own domains, with periodic reports, notifications and reports on request. They direct MSPs to the partner offering. Confirm current availability; DMARC AI's UK offer is a trial followed by paid per-domain monitoring, rather than an ongoing free subscription tier.
What should an MSP confirm before switching from Kevlarr?
Confirm the paid domain and retention limits, report and customer permissions, API endpoints, PSA or billing connectors, support boundaries, DNS ownership, and who performs sender investigation and remediation. Run both reporting destinations during the transition, and keep the DNS owner responsible for approving each record change.
Switching from Kevlarr takes three steps
- 1
Batch-import your domains
Bring your client domains into Palisade in bulk, or let your ConnectWise, HaloPSA, or Autotask integration sync them automatically.
- 2
Run both platforms in parallel
Keep both reporting destinations configured during the overlap, verify external-report authorization where required, and confirm reports arrive in both platforms before retiring Kevlarr. Review hosted-record dependencies before changing DNS.
- 3
Cut DNS over on your schedule
Point records at Palisade's hosted infrastructure, then retire the old setup when you're satisfied.
15-day full-product trial. Nothing is charged until it ends.
Source citations on this page run through 2026-10-15; individual claims retain their dates and evidence limitations. Spotted something out of date? Tell us and we'll fix it.