parsedmarc vs Palisade in 2026
How parsedmarc and Palisade compare on operating model, pricing, and fit for IT teams and MSPs.
Our verdict: Pick Palisade if you want an AI agent to investigate senders, draft fixes, and propose policy steps for human approval, whether you manage one domain or thousands. Pick parsedmarc when its documented workflow, deployment requirements and commercial terms fit your team.
Samuel Chenard · CEO & Co-Founder, PalisadeSource checks through 2026-10-1415-day full-product trial. Nothing is charged until it ends.
ChatGPT
Claude
Gemini
Perplexity
Grok
parsedmarc
Palisade
Provisional · 4/8 dimensions established
Average of established dimensions; may change as remaining dimensions are verified.
Full rubric · 8/8 dimensions established
Palisade's IT-team plans start at $19 a month, sized by email volume. Start with a 15-day full-product trial; nothing is charged until it ends.
Which one is right for you?
Best for Teams with engineering time and in-house data infrastructure
Best for MSPs and IT teams responsible for multiple domains
- The documented parsedmarc workflow and commercial terms match your operating requirements.
- Your buying criteria center on vendor-specific enterprise requirements.
- Pick parsedmarc if your team can own deployment, report ingestion, storage, dashboards and ongoing maintenance of a self-hosted DMARC pipeline.
- Pick parsedmarc if report data must stay inside your own infrastructure and you already operate Elasticsearch, OpenSearch, or Splunk.
- You run an MSP, or an internal IT or security team, responsible for multiple domains.
- You want an AI agent to investigate issues, configure authentication, and move domains toward p=reject.
- Teams already using Claude, OpenAI, or other AI tools can bring the same agent-led operating model to DMARC.
IT-team plans start at $19 a month, sized by email volume. Start with a 15-day full-product trial; nothing is charged until it ends.
Where the day-to-day work actually differs
| Feature | parsedmarc | Palisade |
|---|---|---|
| Enforcement | ||
| Agent does the enforcement work and evaluates policy readiness; you approve each stepWhether the product performs enforcement work and prepares policy steps for approval.The project documentation describes report parsing, storage and output; it does not establish authentication-record changes or a staged policy-enforcement workflow. | —Not established in reviewed sources | Agent drafts; you approve |
| DMARC report monitoringWhether the product collects DMARC reports for review.Parses aggregate, failure, and SMTP TLS reports into JSON/CSV and backends such as Elasticsearch, Splunk, and PostgreSQL, with Kibana and Grafana dashboards | Parses reports to backends | Agent analyzes reports |
| Limits & metering | ||
| Unlimited report historyHow long report history remains available to your team.Palisade IT-team and MSP plans include unlimited report history; Enterprise retention follows custom terms. parsedmarc stores reports in the operator’s chosen backend. Retention depends on that backend’s configuration and capacity; the project does not establish a vendor-hosted unlimited-history entitlement. | —Operator-controlled storage | Unlimited IT/MSP; Enterprise customSource |
| Portfolio-based MSP pricingWhether MSP pricing is based on the client-domain portfolio.The project is distributed as a self-hosted Python module and CLI rather than a commercial service, so it publishes no portfolio price; adopters supply the infrastructure and maintenance (checked 2026-08-29). Source (2026-08-29) | No portfolio price | Per client domain |
| MSP operations | ||
| ConnectWise, HaloPSA & Autotask integrationsWhether the product connects directly to the named PSA systems.Does not advertise any PSA integrations (checked 2026-07-18) | No PSA integrations | Native PSA integrations |
| API access on every planWhether every plan includes programmatic access to product data.Usable as a Python module and CLI, but there is no hosted service or REST API | No hosted REST API | Included on every plan |
| Hosted records & DNS | ||
| Hosted DMARC, SPF & MTA-STS recordsWhether the product hosts the listed authentication records.Does not manage or host DNS records (checked 2026-07-18) | No DNS record hosting | Hosted on managed DNS |
| SPF flatteningWhether SPF lookup chains can be reduced before publication.Does not advertise SPF flattening (checked 2026-07-18) | —Not advertised | Hosted SPF flattening |
| DNS uptime guaranteeWhether hosted records are served through redundant managed DNS.parsedmarc is a self-hosted Python module and CLI, not a hosted DNS service, so a vendor DNS uptime guarantee does not apply (checked 2026-08-29). Source (2026-08-29) | No DNS hosting | Redundant managed DNS |
| AI and automation access | ||
| Published REST or GraphQL API for product dataWhether a customer can build against a documented hosted REST or GraphQL API.parsedmarc documents a Python module and CLI utility, plus an API reference for its package. It does not advertise a hosted REST or GraphQL API (checked 2026-08-27). Source (2026-08-27) | Python module and CLI | REST API published |
| MCP server for connecting AI assistants to domain dataWhether an AI assistant can reach the product's data directly.parsedmarc does not advertise an MCP server or an AI-assistant integration in its public documentation, which lists a Python module, CLI utility, and Python API reference (checked 2026-08-27). Source (2026-08-27) | —No MCP server listed | MCP server published |
| Advertised AI or machine-learning featuresWhether the vendor advertises AI features and explains what they do.parsedmarc does not advertise an AI or machine-learning feature in its public documentation. The documented features cover report parsing, JSON or CSV output, dashboard backends, and outbound destinations (checked 2026-08-27). Source (2026-08-27) | —No AI feature listed | Agent drafts fixes |
| Data export and webhook deliveryWhether report data can leave the product without working in its dashboard.parsedmarc documents JSON and CSV output and a webhook configuration that posts individual reports as a JSON body to aggregate, failure, and SMTP TLS webhook URLs (checked 2026-08-27). Source (2026-08-27) | JSON, CSV, and webhooks | REST API published |
Want to compare the workflow yourself? Start a 15-day full-product trial of Palisade.
Palisade vs parsedmarc: score evidence and limitations
Both products are scored on the same eight dimensions the comparison hub uses, so the figures here are the figures there. Four are derived from vendor facts that each carry a source and a checked date. Four are editorial, marked as such below, and each states its reasoning and its source.
Each dimension is out of 10 and the total is the raw sum out of 80, rescaled to 100 — the raw figure is printed beside it so the conversion is checkable rather than a black box. Scored on what each vendor publishes, not on how the product feels in use. Unknown scoring dimensions are shown as Not established; provisional scores average only established dimensions and show coverage. They may change as remaining dimensions are verified. Current ranks include full and provisional scores; equal displayed scores share a rank. Historical assessments are separate. Editorial dimensions last reviewed 2026-10-15.
Provisional · 4/8 dimensions established
Average of established dimensions; may change as remaining dimensions are verified.
Full rubric · 8/8 dimensions established
How reachable the vendor's DMARC data is from your own software and AI tools. Two paths count, an API and an MCP server, and each only if it reaches DMARC data (domains, records, reports or sending sources). A path is open when it is documented and included from the cheapest paid plan; gated when it needs a higher tier, an add-on, a sales call or a request, or the vendor does not say which plans include it. 10 = both open. 9 = one open, one gated. 8 = both gated. 7 = one open, the other absent. 6 = one gated, the other absent. 5 = access claimed in marketing only, with no docs or plan listing. 4 = reachable only through a self-hosted tool's own interface or a host platform's API, such as parsedmarc's library or Splunk's REST API; a dashboard over a database you run yourself does not count. 3 = no API or MCP server reaches DMARC data.
The parsedmarc Python project documents a library API for parsing DMARC reports and returning structured report data. This is the self-hosted library access described by the published rubric’s four-point category. Source (2026-08-28) Source (2026-10-14)
Palisade publishes a REST API and a remote MCP server on every plan, making the same domain data and remediation workflows available to connected software. Source (2026-08-30)
How much of the report analysis is done for you. 10 = the platform turns raw report data into a prioritised, actionable queue on its own.
parsedmarc automates report collection, decompression, parsing and delivery; the reviewed README does not settle enrichment and downstream prioritization/remediation scope. Source (2026-08-28)
Report data is analysed into a prioritised list of sender, SPF, DKIM and DMARC issues, so nobody reads raw XML. Source (2026-08-30)
How much of the work the vendor's own software does. 10 = it identifies the sending sources, drafts the SPF and DKIM fixes each one needs, and proposes the next policy step. 6 = it applies the records for you, but a person decides what to fix and when to advance. 3 = it reports, and every change is yours to make. A vendor whose team does the work rather than its software scores here on the software alone.
parsedmarc documents report parsing and export; the reviewed README does not establish who performs every DNS and policy-change step. Source (2026-08-28)
The agent investigates each sender, drafts the SPF and DKIM changes it needs, and proposes the next policy step; a human approves before deployment. Source (2026-08-30)
10 = full pricing published. 6 = some tiers published, rest quote-gated. 3 = quote only.
Free open-source software under the Apache 2.0 licence; operators pay for their own infrastructure. Source (2026-08-28)
Self-service IT-team prices are published by email volume from $19/month; MSP pricing is portfolio-based per client domain, and Enterprise pricing is custom. Source (2026-08-30)
10 = hosts the records for you. 6 = partial or add-on. 3 = you manage your own DNS.
No: the package parses reports and does not host or manage authentication records. Source (2026-08-28)
Yes: hosted DMARC, SPF, DKIM, BIMI & MTA-STS Source (2026-08-30)
10 = a genuine free plan. 6 = time-limited trial only. 3 = no free access.
The complete package is free to use under the Apache 2.0 licence. Source (2026-08-28)
No free plan: a 15-day full-product trial; nothing is charged until the trial ends Source (2026-09-25)
10 = a real MSP program with multi-tenant management. 6 = partial. 3 = none.
parsedmarc is a self-hosted open-source DMARC report parser; a commercial MSP programme is not established or excluded by this repository. Source (2026-08-28)
Yes: MSP-first, multi-tenant with native PSA integrations Source (2026-08-30)
How much work it takes to get a domain from p=none to p=reject. 10 = the platform (or the vendor's team) gets you there without manual DNS edits.
parsedmarc primarily documents parsing and report delivery for operator systems; the reviewed README does not settle DNS-write or staged-policy capabilities. Source (2026-08-28)
The DMARC Agent detects when a domain's authentication and alignment are ready for the next policy stage and proposes the move, but a human still approves and applies it, so it is not fully hands-off. Source (2026-08-30)
Where Palisade and parsedmarc actually differ
Each argument keeps the product screens, sourced comparison points, and supporting analysis together.
Recommendations vs execution
How enforcement actually happens
parsedmarc is a Python module and CLI that watches a mailbox over IMAP, Microsoft Graph or the Gmail API, parses incoming aggregate, failure and SMTP TLS reports, and sends results to backends such as Elasticsearch, Splunk or PostgreSQL. Kibana and Grafana dashboards visualize the data. The project documentation describes this report-processing and output workflow; it does not document a workflow for changing authentication records or advancing DMARC policy.
parsedmarc
A relevant product screenshot was not available in the reviewed evidence.
- Agent does the enforcement work and evaluates policy readiness; you approve each step: Not established in reviewed sources
- DMARC report monitoring: Parses reports to backends
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- Agent does the enforcement work and evaluates policy readiness; you approve each step: Agent drafts; you approve
- DMARC report monitoring: Agent analyzes reports
Palisade’s AI agent analyzes report data, investigates senders, drafts SPF and DKIM fixes, and proposes policy steps appropriate to the domain for approval. parsedmarc’s documented workflow processes reports into a self-hosted analysis pipeline. Compare that report-processing workflow with the preparation and approval of authentication changes your team needs.
License cost vs operating cost
What free actually costs
There is no license fee: parsedmarc is Apache 2.0 software you download and run. The costs sit elsewhere. You provide a server, mailbox access for report collection, and a storage and dashboard stack such as Elasticsearch with Kibana or OpenSearch with Grafana if you want visualization. You also own upgrades and breakage; the project is maintained by one developer who accepts sponsorships, and no commercial support or SLA is advertised (checked 2026-07-18).Source 1, Source 2
parsedmarc
A relevant product screenshot was not available in the reviewed evidence.
- Unlimited report history: Operator-controlled storage
- Portfolio-based MSP pricing: No portfolio priceSource
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- Unlimited report history: Unlimited IT/MSP; Enterprise customSource
- Portfolio-based MSP pricing: Per client domain
Palisade publishes its self-serve IT-team pricing: flat monthly plans sized by email volume from $19/month (20% off on annual billing) with 2 to 20 set-up domains by tier (adding domains is free and unlimited), unlimited report history on IT-team and MSP plans (Enterprise retention follows custom terms) and API access on every plan, and a 15-day full-product trial. MSPs receive a free NFR domain and portfolio-based per-client-domain pricing with a minimum of 5 client domains and no client email metering. With report history unlimited on IT-team and MSP plans (Enterprise retention follows custom terms), there is no storage bill to size or prune.
What each side charges
Three points on each published range: the cheapest plan, one in the middle, and the top of what the vendor publishes. Every plan on both sides is in the pricing section further down.
- Open source / self-hosted$0 license (self-hosted)
Python CLI and module that parses aggregate (RUA), failure (RUF), and SMTP TLS reports from an inbox over IMAP, Microsoft Graph, or the Gmail API, with output to Elasticsearch, OpenSearch, Splunk, PostgreSQL, Kafka, S3, and other backends. You supply the hosting, storage, dashboards, and maintenance.
- IT teams: up to 100,000 emails/mo$19/mo ($15/mo billed annually)
2 set-up domains (adding is unlimited), unlimited retention, every core feature
- IT teams: up to 1,000,000 emails/mo$99/mo ($79/mo billed annually)
Same product: 10 set-up domains, pick the tier that matches your sending
- Enterprise (more than 2.5M / month)Custom
Custom volume, retention, and terms
In-house control vs client scale
Who parsedmarc genuinely serves
parsedmarc fits engineering and security teams that already run a data stack and want DMARC report data inside their own infrastructure, including regulated environments where failure reports cannot leave the building. Since v8.19.0 it supports multi-tenant Elasticsearch and OpenSearch setups through index prefixes mapped to domains, so a technically staffed team can monitor several domains from one pipeline it fully controls.
parsedmarc
- ConnectWise, HaloPSA & Autotask integrations: No PSA integrations
- API access on every plan: No hosted REST API
Palisade
- ConnectWise, HaloPSA & Autotask integrations: Native PSA integrations
- API access on every plan: Included on every plan
parsedmarc supports multi-tenant Elasticsearch and OpenSearch through domain-to-index-prefix mappings. A team running it for clients still owns the ingestion pipeline, storage, dashboards and remediation workflow. Assess the infrastructure and operating work at the portfolio size you expect.
Dashboard access vs programmatic access
parsedmarc's Python library and webhooks, without a published MCP server
parsedmarc publishes a Python module and CLI utility, with library API references for its package. It writes report data as JSON or CSV and can post individual aggregate, failure, and SMTP TLS reports to configured webhook URLs. The public documentation does not advertise a hosted REST or GraphQL API, MCP server, AI-assistant integration, or AI or machine-learning feature (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27)
parsedmarc
A relevant product screenshot was not available in the reviewed evidence.
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- Published REST or GraphQL API for product data: REST API published
- MCP server for connecting AI assistants to domain data: MCP server published
- Advertised AI or machine-learning features: Agent drafts fixes
Palisade publishes an MCP server and a REST API. Its agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step. A human approves before anything ships.
Reachable from your own AI tools
Palisade's MCP server exposes 42 tools over OAuth, so the assistant your team already uses can read domains, pull the exact records to publish and work the task queue. These are the clients the connection guide walks through.
- ChatGPT
- Claude
- Codex
- Cursor
- Windsurf
- Any MCP client
Still deciding between parsedmarc and Palisade? See what changes with Palisade.
15-day full-product trial. Nothing is charged until it ends.
Microsoft 365
Zoho Mail
The agent does the heavy lifting
Sources identified, SPF and DKIM fixes drafted, each policy step proposed. You approve; nothing ships on its own.
Connect your AI with MCP
42 tools over MCP, so your assistant reads your domains and works the queue.
Connect your DNS manager directly
One-time sign-in supports 64 providers without retaining credentials. Optional account connections support Cloudflare, GoDaddy and Route 53. You approve every change.
“We evaluated many DMARC providers before choosing Palisade. The quality of their product, the responsiveness and friendliness of their team and their rapid progress on their product roadmap made it a no-brainer for us to move forward.”
parsedmarc pricing explained (and how Palisade compares)
parsedmarc has no pricing page because there is nothing to buy: it is Apache 2.0 open-source software. The real cost structure is the infrastructure you host it on and the staff time spent on setup, integration, and upgrades.
What you'd actually pay
The same five buyer sizes on every comparison, so a shape carries from one page to the next.
1 domain, up to 1,000 emails a month
Apache 2.0 covers the software license only
2 set-up domains, up to 100K emails a month
Apache 2.0 covers the software license only
10 set-up domains, up to 1M emails a month
Apache 2.0 covers the software license only
20 set-up domains, up to 2.5M emails a month
Apache 2.0 covers the software license only
Client domains under management, any volume
Apache 2.0 covers the software license only
Palisade’s figures are derived from its published tiers. parsedmarc pricing or licensing source reference: vendor source citation date 2026-08-28. Plans and prices may have changed since.
How parsedmarc prices
- Apache 2.0 licensed; there is no license fee and no paid tier (checked 2026-07-18).
- Real costs are self-managed: a server to run it on, mailbox access for report collection, a storage and dashboard stack (Elasticsearch/Kibana, OpenSearch/Grafana, or Splunk) if you want visualization, and ongoing version upgrades.
- The project is maintained by one developer who accepts sponsorships; it does not advertise commercial support or an SLA (checked 2026-07-18).
- Requires Python 3.10+ on Linux, Windows, or macOS; a bundled IPinfo Lite database handles IP geolocation, with MaxMind GeoLite2 as an optional alternative.
How Palisade prices
- Palisade is a hosted service with published self-serve IT-team pricing: flat monthly plans sized by email volume from $19/month. MSP pricing is per client domain based on portfolio size, with a minimum of 5 client domains; parsedmarc's cost is servers, storage, and staff hours instead of a subscription.
- Palisade’s AI agent drafts authentication fixes and proposes policy changes appropriate to the domain for your approval. The parsedmarc project documentation describes report parsing, storage and output; it does not document a workflow for changing authentication records or advancing DMARC policy.
- Palisade hosts DMARC, SPF and MTA-STS records with SPF flattening on managed DNS. parsedmarc performs DNS queries while enriching reports, but its documented report-processing workflow does not host or publish authentication records.
- Palisade ships native ConnectWise, HaloPSA and Autotask integrations plus API access on every plan; parsedmarc offers data outputs you wire into your own tooling.
parsedmarc source reference: primary reference citation date 2026-08-29.Palisade source reference: the public pricing page citation date 2026-08-30.Plans and prices may have changed since.
Start a 15-day full-product trial of Palisade. Nothing is charged until it ends.
What each one covers, and where it stops
Published facts only, read from each vendor's own material. Neither column describes a hands-on trial, because we have not run one.
parsedmarc is self-hosted Apache 2.0 software for engineering and security teams that want DMARC report data in their own infrastructure. Its Python module and CLI parse aggregate, failure, and SMTP TLS reports from an inbox over IMAP, Microsoft Graph, or the Gmail API, then send them to a chosen backend.
Teams supply the hosting, storage, dashboards, and maintenance. parsedmarc can write report data to Elasticsearch, OpenSearch, Splunk, PostgreSQL, Kafka, S3, and other backends, with Kibana and Grafana used for visualization. No hosted subscription or paid tier is published; the operating cost is the infrastructure and staff time spent on setup, integration, and upgrades.
Palisade is built around an agent that does the DMARC work rather than reporting on it. It identifies every sending source, drafts the SPF and DKIM changes each one needs, and proposes the next policy step when the evidence supports it.
The agent investigates every sender, drafts every fix, and proposes each policy step, you approve before anything ships.
- Parses and sends aggregate, failure, and SMTP TLS reports to storage backends
- Uses the team's storage backend for report retention
- Provides JSON, CSV, and webhook report delivery
- The agent investigates senders and drafts the fix, so the work arrives prepared rather than as a list of findings
- Hosted SPF, DKIM and DMARC records, so an approved change can be carried out rather than handed off
- Portfolio workflow for MSPs, with ConnectWise, HaloPSA and Autotask integrations and a free NFR domain
- An MCP server and a REST API, so the same data and workflow are reachable from the AI tools a team already uses
- Does not advertise changes to SPF, DKIM, or DMARC records or policy enforcement
- Does not publish portfolio-based MSP pricing
- Does not advertise named ConnectWise, HaloPSA, or Autotask integrations
- Does not advertise a hosted REST or GraphQL API
- Does not advertise hosted DMARC, SPF, or MTA-STS record management
- Every policy change waits for a human approval, by design: nothing ships on the agent's own authority
- MSP pricing is portfolio-based per client domain, with a minimum of 5 client domains
- Plans are sized by monthly email volume, so a low-domain, high-volume sender lands on a higher tier than domain count alone suggests
- Starts at
- $0 license (self-hosted)
- License model
- Apache 2.0
- Paid tier
- No paid tier
- Minimum runtime
- Python 3.10+
- Starts at
- IT plans from $19/mo by email volume; 15-day trial
- Trial
- 15 days, full product
- MSP model
- Portfolio-based per client domain; minimum of 5 client domains
What Palisade customers say
5.0 out of 5 on G2Trusted by over 10,000 domains
“Palisade made it so easy for us to get our blue verified checkmark and achieve our BIMI compliance”
Sources and further reading
Source checks run through 2026-10-14; every entry keeps its individual check date.
- parsedmarc documentation
Checked 2026-07-19
- parsedmarc documentation
Checked 2026-08-28
- parsedmarc project repository
Checked 2026-10-14
- parsedmarc GitHub project source
Checked 2026-07-19
- parsedmarc usage documentation (exports and webhooks)
Checked 2026-08-27
- parsedmarc Elasticsearch and Kibana guide
Checked 2026-08-28
- parsedmarc OpenSearch and Grafana guide
Checked 2026-08-28
- parsedmarc releases
Checked 2026-08-28
- Source
Checked 2026-08-28
- Source
Checked 2026-08-28
- Source
Checked 2026-10-13
Palisade vs parsedmarc: FAQ
What is the main difference between parsedmarc and Palisade?
Palisade is agentic DMARC software. Its agent investigates sending sources, works through SPF and DKIM alignment, and moves domains toward p=reject while your team stays in control. When evaluating parsedmarc, compare that operating model with the workflow in its current product documentation and decide how much work you want your team to carry.
Who should choose Palisade?
Choose Palisade if you want an AI agent to investigate senders, draft fixes, and propose policy steps for human approval, whether you manage one domain or thousands. It is also a natural fit for teams already using Claude, OpenAI, or other AI tools to get operational work done.
Who should choose parsedmarc?
Choose parsedmarc if its current integrations, procurement model, or operating workflow better match your requirements. A more operator-led platform can also fit a team that prefers to review reports and make each change itself.
Does Palisade guarantee a specific time to p=reject?
No responsible DMARC platform should promise the same enforcement timeline for every domain. Timing depends on the number of sending sources, access to DNS and third-party systems, and how quickly each legitimate stream can be aligned. Palisade's agent reduces routine investigation and configuration work while operators retain control over policy decisions.
Switching from parsedmarc takes three steps
- 1
Batch-import your domains
Bring your client domains into Palisade in bulk, or let your ConnectWise, HaloPSA, or Autotask integration sync them automatically.
- 2
Run both platforms in parallel
Keep both reporting destinations configured during the overlap, verify external-report authorization where required, and confirm reports arrive in both platforms before retiring parsedmarc. Review hosted-record dependencies before changing DNS.
- 3
Cut DNS over on your schedule
Point records at Palisade's hosted infrastructure, then retire the old setup when you're satisfied.
15-day full-product trial. Nothing is charged until it ends.
Source citations on this page run through 2026-10-14; individual claims retain their dates and evidence limitations. Spotted something out of date? Tell us and we'll fix it.