Case Study: How Flotek sells DMARC under its own brand, built on Palisade

The short version: Flotek Group, a UK managed service provider, sells managed DMARC under its own brand, Flo Verified Mail, and Palisade does the work underneath. Prospects run a free check on flotek.io and get a Flotek-branded report. Existing partners see live DMARC status inside Flotek's own portal. Flotek's CEO makes prospecting reports by asking Claude. For another MSP, the lesson: you can sell DMARC under your own name without building a DMARC product.

“Flotek has integrated Palisade into its website and Partner Portal as Flo Verified Mail. The public reporting experience helps businesses identify email-security risks and begin an informed conversation with Flotek, while the portal gives existing partners ongoing visibility into DMARC protection, trusted senders and email-authentication compliance. This supports Flotek’s growth while helping protect partners against spoofing, impersonation and email-deliverability issues.”

>

— Kevin James, Senior Software Developer at Flotek Group

What Flotek built on Palisade

Flotek packaged the service as Flo Verified Mail. Flotek sets it up on the partner's domain wherever it is registered, reads the daily reports, approves every genuine sender and moves the domain to full protection in stages. Flotek's developers built the two customer-facing surfaces on the Palisade API.

1. A free domain check that ends in a report

On flotek.io, anyone can enter a domain and get a score, a plain-English risk rating and a PDF they can download or have emailed to them. There is no sign-up, and it takes about twenty seconds.

The PDF is Palisade's white-label prospecting report, carrying Flotek's name. It opens on a verdict about how easy the domain is to impersonate, then walks through risk, findings, who can send as the domain, and four steps in order: monitor and sign, fix the senders, enforce, and keep watching. It closes with a deadline, so the reader sees a plan with dates rather than a list of problems.

A prospect who reads that report arrives at the first call already knowing what is wrong and roughly how long it takes to fix. That is the "informed conversation" Kevin describes.

2. Live DMARC status in the Flotek Partner Portal

Existing partners see their domains in the Flotek Partner Portal, drawn from Palisade. Each domain shows its DMARC policy and stage, a score, fourteen days of email volume, the work still ahead, every known sender, and a pass rate for DMARC, SPF and DKIM per sending source.

Flotek's product page promises a service that is "checked daily by a Flotek engineer, visible in your portal". This screen is the portal half of that promise: the partner can see, any time, the status Flotek checks every day.

3. Prospecting reports from a chat with Claude

Some of Flotek's reports never touch a dashboard. Jay Ball, Flotek's CEO, connected Claude to Palisade through Palisade's MCP server, and since mid-September he has created prospecting reports by asking for them in the conversation. Claude calls Palisade's create_prospecting_report tool, and the reply comes back with the report's link and the date it expires, ready to send to the prospect.

It is the same Palisade prospecting report that sits behind the free check on flotek.io, so a report started in a sales conversation and one started on the website read the same way.

You don't need developers to sell DMARC this way

Flotek wired Palisade into its website and portal because it already had developers and a portal of its own. The part that wins new business needs no code at all:

• Branded prospecting reports from the Palisade app. Add up to 10 of a prospect's domains, choose English or French, a light or dark theme, the currency, and a deadline of 1 to 52 weeks. The report opens on a verdict, lays out the steps in order, and closes on that deadline.
• Shared as a link, not an attachment. Each report is a hosted link that stays live for 90 days, and you can see whether the prospect opened it.
• Or ask your AI assistant. Connect Claude or another MCP client to Palisade, the way Flotek's CEO does, and ask for the report in a sentence.
• Or create them over the API, when you want your own site or portal to make them, the way Flotek does.

The day-to-day work behind the service is Palisade's too: it reads every DMARC report, tracks each sender, opens a ticket with the fix, and hosts the SPF and DMARC records, so your engineers approve changes rather than hunt for them.

The quickest way to see it is on your own domain: get your free NFR domain or book a call with a founder.

Why Flotek chose Palisade

Gmail and Yahoo began requiring bulk senders to authenticate their mail in February 2024, and Outlook followed in May 2025. Mail that cannot prove where it came from is more likely to land in spam, where the sender gets no notice, or to be refused outright. The same gap lets anyone send invoices and "bank details changed" emails in a business's name.

Flotek sells to law firms, hotels, estate agents and local councils, among others, and DMARC was the gap in its portfolio. Flotek got in touch in August 2026 and set out what it needed:

• DMARC for the whole customer base, sold as a managed service at one monthly price per domain rather than as a project.
• A way to start the conversation with new businesses. A business owner will not ask for DMARC. They will type their domain into a box to see whether their email is arriving, and a clear report on a weak domain gives Flotek a reason to talk.
• Its own portal, not ours. Flotek has in-house developers and a Partner Portal its partners already log in to. It wanted the data brought in over an API, so partners would not be sent to another vendor's dashboard.

Flotek chose Palisade for the work model: tickets that say what to fix, rather than a dashboard to interpret; hosted records with their DNS history; a clear signal for when a domain is safe to move to the next policy step; and prospecting reports it could pull over the API and put its own name on. It started with its own domain.

Flotek has shaped the product since. Its feedback in September changed our prospecting report: a verdict on the cover, the steps in order with a deadline, and a choice of currency, pounds included. Every Palisade prospecting report now opens that way.

Flotek runs its own domain on Flo Verified Mail

Flotek did not want to sell Flo Verified Mail before its own domain was set up on it, so flotek.io went first. The Partner Portal screenshot above is that domain. On 29 September 2026, Palisade's data showed flotek.io had sent 17.3k emails in the previous fourteen days, 99.99% of them passing DMARC. The domain was in the enforcement stage, quarantining 20% of failing mail on its way to full protection. Its SPF record resolves through Palisade's hosted SPF, which went live on 14 September.

About Flotek

Flotek is a managed service provider for IT, cyber security and communications, headquartered in Bridgend, South Wales, with regional offices across the UK. It has grown by buying well-regarded local providers, from Swansea and Cardiff to Plymouth, Basingstoke, Cambridge and Essex, and it says it "believes in partners, not customers". Its team goes by the Purple Army, after the shirts.

The awards are recent. Flotek was named IT Support Service of the Year 2026/27 at the Wales Prestige Awards, and its leadership won MSP/Reseller Executive Leadership Team of the Year at the Channel Champions Awards 2026.