--- title: "Valimail review: what is confirmed and who it fits" description: "Valimail review: what anyone can check about Monitor, Enforce, the MSP plans and the new Claude MCP connection, what is only claimed, and who it fits." canonical: https://www.palisade.email/learning/valimail-review last-updated: 2026-11-13 --- # Valimail review: what is confirmed and who it fits > Valimail review: what anyone can check about Monitor, Enforce, the MSP plans and the new Claude MCP connection, what is only claimed, and who it fits. Valimail is an established DMARC vendor, part of DigiCert since an acquisition announced on 16 September 2025, that sells free Monitor visibility and quote-priced Enforce automation. It fits enterprise and public-sector teams that want Valimail to host their DMARC and DKIM records by delegation and manage SPF through its patented macro. It fits less well for an MSP that wants to see a per-domain price before talking to sales, because Valimail publishes none. This review separates what Valimail has shipped and anyone can check from what it claims in marketing copy. Everything below was checked on Valimail's own site and help center on 13 November 2026. ## Quick takeaways - Valimail now calls itself "Valimail, a DigiCert company". DigiCert announced the acquisition on 16 September 2025, and Valimail told customers nothing changes for their accounts. - Monitor is free. Every Enforce tier and the Amplify BIMI add-on are priced by quote. - The MSP products, DMARC Core and DMARC Pro, are listed on the Pax8 marketplace and sold per domain. No rate is published. - Confirmed from outside an account: the plans and feature matrix, the MSP packages, the Pax8 listing, and the DNS delegation model, which Valimail runs on its own domain. - Announced on 9 November 2026: a read-only Claude MCP connection, offered as a Labs feature on Enforce Enterprise only. It cannot be checked without that plan. - Claimed but not checkable: "4x faster" enforcement, a typical 45 days to `p=reject`, and being the only FedRAMP-authorized DMARC provider. ## What Valimail sells today [Valimail's pricing page](https://www.valimail.com/pricing/) has three products: - **Monitor:** free sign-up for sender visibility. The feature matrix gives it 5 users, 10 SPF lookups and "Limited" automated DMARC. To see what Valimail's free domain check reports before signing up, read [Valimail's DMARC checker explained](/learning/valimail-dmarc-checker). The Monitor page says "No trial offers, credit cards, or obligations" ([Monitor](https://www.valimail.com/products/monitor/)). To check a domain with Valimail's own tool, see the [Valimail DMARC checker guide](/learning/valimail-dmarc-checker). - **Enforce:** Starter, Premium and Enterprise, each "Contact us for custom pricing". Paid tiers add automated DKIM, unlimited SPF through Instant SPF, reports and unlimited users. Subdomain management starts at Premium. Portfolios, SAML/SSO, the FedRAMP deployment option and the new continuous protection reports are Enterprise only. API access is an add-on on Starter and Premium and included on Enterprise. - **Amplify:** the BIMI add-on, "Contact Us for Pricing". For MSPs, the [MSP page](https://www.valimail.com/partners/msp/) sells **DMARC Core** (multi-tenant console, role-based access, team alerting, automated DMARC, SPF and DKIM) and **DMARC Pro** (adds BIMI, MTA-STS, continuous protection reporting, advanced alerting and API access). Its FAQ says resale uses "per-domain pricing and availability on the Pax8 marketplace", with client billing run through the MSP's own PSA or RMM. ## What is confirmed live ![Valimail: what is confirmed live, such as the plans, the Pax8 listing and the NS delegation model, next to what cannot be checked from outside, such as 4x faster enforcement and the per-domain MSP rate](/images/editorial/valimail-review/valimail-review-confirmed-vs-claimed.webp "1200x533") *Source: Palisade, from Valimail's site and help center checked 13 November 2026.* These parts can be checked without a Valimail account: - **Plans and tier limits.** The pricing page and its Compare Plans table, described above. - **The Pax8 listing.** [Pax8's Valimail page](https://www.pax8.com/en-us/vendors/valimail/) lists Valimail DMARC Core and Valimail DMARC Pro. It shows no price publicly and keeps full details for signed-in partners. - **The delegation model.** Valimail's help center asks Enforce customers to delegate `_dmarc` and `_domainkey` to `ns.vali.email` by NS record and to replace their SPF record with `v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all` ([setup guide](https://support.valimail.com/en/articles/9142775-setup-your-dns-records-to-use-valimail)). Valimail's own domain runs the same way: on 13 November 2026, `_domainkey.valimail.com` was delegated to `ns.vali.email`, its SPF record carried the `_spf.vali.email` macro, and its MTA-STS names were CNAMEs into Valimail's `vali.email` and `mta-vali.email` hosts. - **Webhooks.** Enforce sends signed HTTP POST requests for events such as a domain being added, a DMARC policy change or suspicious sending ([webhooks guide](https://support.valimail.com/en/articles/16564371-webhooks)). - **A documented exit.** Valimail publishes an [offboarding process](https://support.valimail.com/en/articles/9143118-valimail-enforce-offboarding-process) that starts "You are never locked into using Valimail Enforce" and lists what to copy out first. ## What is claimed but not verifiable These claims come from Valimail's marketing pages. They may be true. They cannot be checked from outside, so treat them as questions for a demo. - **Speed.** The homepage and Enforce page say Valimail reaches enforcement "4x faster" than any other platform, the pricing page says "Reach DMARC enforcement in 60 days or less", and the [AI Info page](https://www.valimail.com/ai-info/) puts the typical time to `p=reject` at 45 days. No method is published. - **The MCP connection.** Valimail's [MCP announcement](https://www.valimail.com/blog/valimail-mcp-integration/), dated 9 November 2026, and its [help article](https://support.valimail.com/en/articles/17435884-claude-mcp-integration) describe a Claude connection for Enforce Enterprise account owners with two-factor or single sign-on. The help article says it is read-only and "cannot change configuration, senders, or DNS", that it is a Labs feature, and that other AI clients are planned. Which questions it answers well needs an Enterprise account to test. - **FedRAMP.** Valimail and DigiCert both describe Valimail as the only DMARC provider with FedRAMP authorization ([DigiCert announcement](https://www.digicert.com/news/digicert-acquires-valimail-global-leader-in-email-authentication)). The authorization itself was not checked for this review. - **Rankings and scale.** The homepage says Valimail is rated #1 on G2 for 16 consecutive quarters and that 450,000+ domains are secured by Valimail and DigiCert. DigiCert's announcement put Valimail at 92,000 clients. These are the companies' own figures. ## Valimail pros and cons Pros, from Valimail's published material: - Monitor is free, with no card. - Instant SPF answers per sending IP through an SPF macro, which Valimail says removes the 10-lookup limit. - Delegated DMARC and DKIM mean policy and key changes happen in Valimail with no further DNS edits. - A real MSP line, with multi-tenancy and a Pax8 listing. - A published, step-by-step offboarding process. Cons, from the same material: - No price is published for any paid tier, for Amplify or for the MSP products. - API access is an add-on below Enterprise, and the MCP connection is Enterprise only. - Portfolios and SAML/SSO on the direct plans are Enterprise only. - The MSP page names no native ConnectWise, HaloPSA or Autotask connector and does not mention white-label client reports. - Leaving takes more work than removing one record, because the DKIM keys and the sender list live in Valimail. ## Who Valimail fits Valimail fits well when: - A US federal, state or regulated buyer needs a FedRAMP option. - An enterprise team wants Valimail to host DMARC and DKIM by delegation and to manage SPF without a lookup budget. - An MSP already buys through Pax8 and wants DMARC on the same marketplace bill. - A brand wants BIMI from the same vendor: Valimail sells Amplify, and its parent DigiCert issues Verified Mark Certificates. Valimail fits less well when: - **You want to model MSP margin before talking to sales.** The per-domain rate is not published on Valimail's site or on the public Pax8 page. - **You want tickets in your PSA.** The MSP FAQ describes billing through your own PSA or RMM, not a connector that opens tickets. - **You want an assistant that can act.** The Claude connection reads data and suggests next steps; it cannot change records, and it needs Enterprise. For what Valimail publishes and hides about price, see [Valimail pricing](/learning/valimail-pricing). ## Is Valimail legit? Yes, Valimail is an established vendor. It was founded in 2015, is based in Boulder, Colorado, and has been part of DigiCert since the acquisition announced on 16 September 2025 ([AI Info](https://www.valimail.com/ai-info/), [DigiCert](https://www.digicert.com/news/digicert-acquires-valimail-global-leader-in-email-authentication)). Valimail's [acquisition post](https://www.valimail.com/blog/digicert-acquires-valimail-to-accelerate-the-future-of-digital-trust/) told customers there were "no planned migrations, no new credentials, and no action required". ## Alternatives for teams leaving Valimail If the unpublished MSP price or the Enterprise-only features are the reason to look elsewhere, Palisade is agentic DMARC software built for IT teams and MSPs. It publishes its per-client-domain price on the [MSP pricing page](/for-managed-service-providers#msp-pricing), includes hosted records on every paid plan, connects to ConnectWise, HaloPSA and Autotask, and its agent drafts every SPF and DKIM fix and proposes each policy step for your team to approve. The [Valimail alternative comparison](/valimail-alternative) sets the two side by side, and the [Valimail migration guide](/learning/migrate-from-valimail) shows how to run both before you switch. ## Sources and further reading - [Valimail pricing](https://www.valimail.com/pricing/) - [Valimail Monitor](https://www.valimail.com/products/monitor/) - [Valimail for MSPs](https://www.valimail.com/partners/msp/) - [Pax8: Valimail](https://www.pax8.com/en-us/vendors/valimail/) - [Valimail AI Info](https://www.valimail.com/ai-info/) - [Valimail MCP announcement, 9 November 2026](https://www.valimail.com/blog/valimail-mcp-integration/) - [Valimail help center: Claude MCP integration](https://support.valimail.com/en/articles/17435884-claude-mcp-integration) - [Valimail help center: set up your DNS records to use Valimail](https://support.valimail.com/en/articles/9142775-setup-your-dns-records-to-use-valimail) - [Valimail help center: webhooks](https://support.valimail.com/en/articles/16564371-webhooks) - [Valimail help center: Enforce offboarding process](https://support.valimail.com/en/articles/9143118-valimail-enforce-offboarding-process) - [DigiCert acquires Valimail, 16 September 2025](https://www.digicert.com/news/digicert-acquires-valimail-global-leader-in-email-authentication) - [Valimail: DigiCert acquires Valimail](https://www.valimail.com/blog/digicert-acquires-valimail-to-accelerate-the-future-of-digital-trust/) ## Frequently asked questions ### Is Valimail owned by DigiCert? Yes. DigiCert announced its acquisition of Valimail on 16 September 2025, and Valimail now describes itself as "Valimail, a DigiCert company". Valimail told customers the acquisition needed no action: no planned migrations, no new credentials, and the same products and support team. ### Does Valimail have an MCP server? Yes, in a limited form. Valimail announced a read-only Claude MCP connection on 9 November 2026, offered to Enforce Enterprise customers as a Labs feature. Valimail's help article says Claude can read DMARC, sender and domain reporting but cannot change configuration, senders or DNS, and that other AI clients are planned. ### Is Valimail Monitor really free? Yes. Valimail Monitor is a free sign-up with no card, limited to 5 users and 10 SPF lookups, with limited automated DMARC. It shows which services send as your domain. Automated DKIM, unlimited SPF and reports are part of the paid Enforce tiers. ### Is Valimail good for MSPs? Valimail fits an MSP that buys through Pax8 and wants a multi-tenant DMARC console with automated SPF, DKIM and DMARC. It fits less well for an MSP that wants a published per-domain price or native PSA ticketing, since Valimail publishes no MSP rate and its MSP page names no ConnectWise, HaloPSA or Autotask connector. ### Can I leave Valimail easily? Yes, with preparation. Valimail publishes an offboarding process: copy every DKIM key and enabled sender out of Valimail, publish them in your own DNS or at a new provider, then remove the `_domainkey` and `_dmarc` NS records. The [Valimail migration guide](/learning/migrate-from-valimail) adds a 30-day side-by-side period first.