Valimail vs Palisade in 2026
Valimail follows a conventional enterprise platform model. Palisade is agentic: its AI agent investigates issues, configures authentication, and moves domains toward enforcement. Palisade is designed for IT teams and MSPs, from one domain to thousands.
Our verdict: Pick Palisade if you want agent-led DMARC operations, published self-serve IT pricing, and portfolio-based MSP pricing. Pick Valimail if federal certification and a traditional enterprise buying process lead your requirements.
Samuel Chenard · CEO & Co-Founder, PalisadeSource checks through 2026-07-101 domain free up to 1,000 emails/month
ChatGPT
Claude
Gemini
Perplexity
Grok
Valimail
Palisade
Palisade is free for one domain, up to 1,000 emails a month. Paid IT-team plans are sized by email volume. Start a 15-day full-product trial with no credit card.
Which one is right for you?
Best for Federal and enterprise buyers
Best for MSPs and IT teams responsible for multiple domains
- You prefer a more traditional Valimail workflow with people involved in each enforcement step.
- Your buying criteria center on vendor-specific enterprise requirements.
- Federal certification and a traditional enterprise buying process lead your requirements.
- You want Valimail's published Enforce authorization workflow, Instant SPF, or FedRAMP option for an enterprise program.
- You run an MSP, or an internal IT or security team, responsible for multiple domains.
- You want an AI agent to investigate issues, configure authentication, and move domains toward p=reject.
- Teams already using Claude, OpenAI, or other AI tools can bring the same agent-led operating model to DMARC.
Free for one domain, up to 1,000 emails a month. Paid IT-team plans are sized by email volume. Start a 15-day full-product trial with no credit card.
Where the day-to-day work actually differs
| Feature | Valimail | Palisade |
|---|---|---|
| Enforcement | ||
| AI agent that does the enforcement work (you approve each step)Whether an agent investigates senders, drafts fixes, and proposes policy steps for approval. | Not advertised | Agent drafts and proposes |
| Reporting and analysis | ||
| DMARC report monitoring & analyticsWhether DMARC reports are monitored and presented for review. | Report monitoring | Agent analyzes reports |
| MSP operations | ||
| Native ConnectWise, HaloPSA & Autotask integrationsWhether the platform connects directly to the named PSA tools. | Not advertised | Native PSA integrations |
| White-label client reportingWhether client reports can use the MSP's own branding. | Not advertised | White-label prospecting reports |
| Multi-tenant client managementWhether one account can manage separate client portfolios. | Multi-tenant management | Multi-tenant management |
| MSP partner programWhether the provider offers a program designed for MSP partners. | Multi-tenant MSP program | MSP pricing model |
| Hosted records & DNS | ||
| Hosted DMARC, SPF & DKIM managementWhether the platform hosts the named email-authentication records. | DNS-delegated record hosting | CNAME-delegated hosted records |
| BIMI managementWhether the platform manages BIMI records and related certificate work. | BIMI through Amplify | Hosted BIMI record |
| Limits & metering | ||
| Free trial of the full product (15 days)Whether the full enforcement product can be evaluated at no cost. | No Enforce trial | 15-day full trial |
| Start small: no four-figure annual entry pointWhether a buyer can begin without a four-figure annual commitment. | $5,000 annual entry | Free plan available |
| AI and automation access | ||
| Documented API for domain, policy, and reporting dataWhether software can configure product data and retrieve reporting data without using only the dashboard.Valimail documents Account Management, DMARC Configuration, and Reporting Data APIs. Its public API overview directs customers to an account manager or product support for the full onboarding guide, and its Enforce guide says API access must be enabled on the account; it does not publish plan-by-plan API availability (checked 2026-08-27). Palisade publishes a REST API. Source (2026-08-27) Source 2 (2026-08-27) | Account-enabled APIs | REST API published |
| MCP server for connecting AI assistants to domain dataWhether an AI assistant can reach the product's data directly.Valimail does not advertise an MCP server or an AI-assistant integration on its public partner page, which names Microsoft, Sublime, Cloudflare, and Abnormal as technology partners (checked 2026-08-27). Palisade publishes an MCP server. Source (2026-08-27) | No MCP server listed | MCP server published |
| AI-assisted sender investigation and fix draftingWhether the vendor advertises AI that investigates senders and prepares authentication changes.Valimail does not advertise an AI or machine-learning product feature on its AI Info page, which describes Monitor, Enforce, Amplify, automation, and open APIs (checked 2026-08-27). Palisade's agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step for human approval. Source (2026-08-27) | No AI feature listed | Agent drafts fixes |
| Event data available outside the dashboardWhether product events can reach another system without an operator exporting from the dashboard.Valimail documents Enforce webhooks that send signed HTTP POST requests to a customer-selected endpoint for events including domain additions, DMARC-policy changes, and suspicious sending activity (checked 2026-08-27). Palisade publishes a REST API. Source (2026-08-27) | Signed HTTP webhooks | REST API published |
Want to compare the workflow yourself? Try Palisade free with one domain and up to 1,000 emails a month.
Palisade 96 vs Valimail 79, and why
Both products are scored on the same eight dimensions the comparison hub uses, so the figures here are the figures there. Four are derived from vendor facts that each carry a source and a checked date. Four are editorial, marked as such below, and each states its reasoning and its source.
Each dimension is out of 10 and the total is the raw sum out of 80, rescaled to 100 — the raw figure is printed beside it so the conversion is checkable rather than a black box. Scored on what each vendor publishes, not on how the product feels in use. Editorial dimensions last reviewed 2026-08-30.
How reachable the product is from your own software and AI tools. 10 = a documented API on every plan plus a published MCP server. 6 = an API, gated to a tier or to a sales conversation. 3 = no programmatic access advertised.
Valimail documents an API for Enforce, with access sold as an add-on on Starter and Premium and included with Enterprise; it does not publish an MCP server. Source (2026-08-27)
Palisade publishes a REST API and a remote MCP server on every plan, making the same domain data and remediation workflows available to connected software. Source (2026-08-30)
How much of the report analysis is done for you. 10 = the platform turns raw report data into a prioritised, actionable queue on its own.
The free Monitor tier provides visibility only; the product's automation is concentrated in enforcement rather than in report triage. Source (2026-07-29)
Report data is analysed into a prioritised list of sender, SPF, DKIM and DMARC issues, so nobody reads raw XML. Source (2026-07-29)
How much of the work the vendor's own software does. 10 = it identifies the sending sources, drafts the SPF and DKIM fixes each one needs, and proposes the next policy step. 6 = it applies the records for you, but a person decides what to fix and when to advance. 3 = it reports, and every change is yours to make. A vendor whose team does the work rather than its software scores here on the software alone.
Valimail Enforce applies authentication records through DNS delegation, but the product material does not document software that drafts sender-specific SPF and DKIM fixes or proposes each policy step. Source (2026-08-27)
The agent investigates each sender, drafts the SPF and DKIM changes it needs, and proposes the next policy step; a human approves before deployment. Source (2026-08-30)
10 = full pricing published. 6 = some tiers published, rest quote-gated. 3 = quote only.
Enforce Starter is published from $5,000 per year; Premium and Enterprise pricing are supplied by quote. Source (2026-08-27)
Published: free plan, then flat monthly plans by email volume from $19/mo Source (2026-08-30)
10 = hosts the records for you. 6 = partial or add-on. 3 = you manage your own DNS.
Yes: Enforce automates email-authentication management through DNS delegation; MTA-STS and TLS-RPT hosting are available to Enforce users. Source (2026-08-27)
10 = a genuine free plan. 6 = time-limited trial only. 3 = no free access.
Free plan: one domain, up to 1,000 emails/mo, 14-day report history, no credit card, plus a 15-day full-product trial Source (2026-08-30)
10 = a real MSP program with multi-tenant management. 6 = partial. 3 = none.
Yes: Valimail Core and DMARC Pro are available to MSPs through Pax8. Source (2026-08-27)
How much work it takes to get a domain from p=none to p=reject. 10 = the platform (or the vendor's team) gets you there without manual DNS edits.
Enforcement is automated through DNS delegation, so SPF/DKIM/DMARC are managed without manual DNS edits, the most hands-off self-serve path to p=reject in this set. Source (2026-07-29)
The DMARC Agent detects when a domain's authentication and alignment are ready for the next policy stage and proposes the move, but a human still approves and applies it, so it is not fully hands-off. Source (2026-07-29)
Where Palisade and Valimail actually differ
Each argument keeps the product screens, sourced comparison points, and supporting analysis together.
Enterprise floor vs flexible pricing
The $5,000 question: entry price and who each platform is for
Valimail's published entry to actual enforcement is Enforce Starter “starting at $5,000/year”. A number that makes sense for the enterprises they serve and stops most MSP client conversations cold. When a 20-person client asks what DMARC will cost them, quoting from a platform with a four-figure floor is a hard place to start.
Valimail
A relevant product screenshot was not available in the reviewed evidence.
- Free trial of the full product (15 days): No Enforce trial
- Start small: no four-figure annual entry point: $5,000 annual entry
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- Free trial of the full product (15 days): 15-day full trial
- Start small: no four-figure annual entry point: Free plan available
Palisade separates the two buying motions. IT teams choose a published flat monthly tier based on email volume, with 2 to 20 set-up domains by tier (adding domains is free and unlimited). MSPs pay per client domain, with rates based on portfolio size and no email metering on client domains, so a growing client's send volume does not change the unit economics.
What each side charges
Three points on each published range: the cheapest plan, one in the middle, and the top of what the vendor publishes. Every plan on both sides is in the pricing section further down.
- Monitor$0
Visibility dashboards, notifications, RBAC, up to 5 users: monitoring, not enforcement
- Enforce PremiumContact sales
Adds DKIM automation, smart alerts, forced MFA
- Amplify (BIMI) / MSPContact sales
BIMI/VMC management; DMARC Pro for MSPs
- Free$0
1 domain, your own, capped at 1,000 emails/mo
- IT teams: up to 500,000 emails/mo$59/mo ($47/mo billed annually)
Same product: 6 set-up domains, pick the tier that matches your sending
- Enterprise (more than 2.5M / month)Custom
Custom volume, retention, and terms
Full-product trial vs monitoring
Try before you buy, or monitor before you buy
Valimail's no-cost entry is the Monitor tier: real visibility dashboards, no enforcement. To experience Enforce itself, there's no published trial, you talk to sales (checked July 10, 2026). Palisade's 15-day trial is the full product: the AI agent runs, records get hosted, and domains move toward p=reject before you've paid anything.
Valimail
A relevant product screenshot was not available in the reviewed evidence.
- AI agent that does the enforcement work (you approve each step): Not advertised
- DMARC report monitoring & analytics: Report monitoring
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- AI agent that does the enforcement work (you approve each step): Agent drafts and proposes
- DMARC report monitoring & analytics: Agent analyzes reports
For an MSP evaluating platforms, that difference is practical: you can prove Palisade's value on a real client domain during the trial and walk into the client conversation with results instead of projections.
Enterprise DNA vs MSP workflow
MSP operations: DNA matters
Valimail does serve MSPs, DMARC Pro builds on their multi-tenant core, and they move through channels like Pax8. But the platform's DNA is enterprise: FedRAMP certification, SAML/SSO, technical account managers. What's absent from their MSP story, as of our check, is the plumbing MSPs live in: no PSA integrations advertised, no white-label reporting mentioned.
Valimail
A relevant product screenshot was not available in the reviewed evidence.
- Native ConnectWise, HaloPSA & Autotask integrations: Not advertised
- White-label client reporting: Not advertised
- Multi-tenant client management: Multi-tenant management
Palisade
- Native ConnectWise, HaloPSA & Autotask integrations: Native PSA integrations
- White-label client reporting: White-label prospecting reports
- Multi-tenant client management: Multi-tenant management
Palisade was built MSP-first: domains sync from ConnectWise, HaloPSA, or Autotask; alerts flow into your ticketing; white-label prospecting reports help you open new business; and multi-tenant management assumes you're running many small-to-mid clients, not one Fortune 500.
Native PSA integrations
Palisade imports client domains straight from these three. Valimail's own coverage is stated above, from their site.
- ConnectWise PSA
- Autotask
- HaloPSA
Dynamic resolution vs hosted SPF
SPF: two ways past the 10-lookup limit
Both platforms solve SPF's 10-DNS-lookup ceiling with hosted SPF, different mechanisms, same goal. Valimail's patented Instant SPF resolves senders dynamically at query time; Palisade hosts and manages your SPF with flattening handled on redundant managed DNS. Valimail argues publicly that their approach is stronger; we'd point out that what an MSP experiences with either is the same headline: SPF stops breaking. Evaluate both on the operational surface you'll actually touch.
Valimail
A relevant product screenshot was not available in the reviewed evidence.
- Hosted DMARC, SPF & DKIM management: DNS-delegated record hosting
- BIMI management: BIMI through Amplify
Palisade
- Hosted DMARC, SPF & DKIM management: CNAME-delegated hosted records
- BIMI management: Hosted BIMI record
Federal scale vs MSP economics
Where Valimail fits
If you're selling into US federal or compliance-heavy enterprise, Valimail's FedRAMP position (by their claim, the only FedRAMP-certified DMARC provider) is a real moat, and their one-click authorization across a huge catalog of pre-configured senders is slick at enterprise scale. Their Amplify product is also a serious BIMI/VMC operation. Palisade doesn't compete for that buyer: it competes for the MSP managing dozens or hundreds of ordinary business domains, where per-domain economics and PSA-native workflow win.
Valimail
Palisade
A relevant product screenshot was not available in the reviewed evidence.
Dashboard access vs programmatic access
Valimail's account-enabled APIs and signed webhooks, with no listed MCP server
Valimail publishes help-center material for Account Management, DMARC Configuration, and Reporting Data APIs. The public materials direct customers to an account manager or product support for the full onboarding guide. An Enforce guide says API access must be enabled on the account, but the public pages do not list plan-by-plan API availability. Valimail also documents signed HTTP webhooks for Enforce alerts, including domain additions, DMARC-policy changes, and suspicious sending. Its partner page names Microsoft, Sublime, Cloudflare, and Abnormal as technology partners, but does not advertise an MCP server or AI-assistant integration. Its AI Info page describes automation and open APIs, but does not advertise an AI or machine-learning product feature (checked 2026-08-27). Source (2026-08-27) Source 2 (2026-08-27) Source 3 (2026-08-27) Source 4 (2026-08-27) Source 5 (2026-08-27)
Valimail
Palisade
A relevant product screenshot was not available in the reviewed evidence.
- Documented API for domain, policy, and reporting data: REST API published
- MCP server for connecting AI assistants to domain data: MCP server published
- AI-assisted sender investigation and fix drafting: Agent drafts fixes
Palisade publishes an MCP server and a REST API. Its agent investigates senders, drafts SPF and DKIM fixes, and proposes each policy step. A human approves before anything ships.
Reachable from your own AI tools
Palisade's MCP server exposes 30 tools over OAuth, so the assistant your team already uses can read domains, pull the exact records to publish and work the task queue. These are the clients the connection guide walks through.
- Claude
- ChatGPT
- Cursor
- Windsurf
- Any MCP client
Still deciding between Valimail and Palisade? See what changes with Palisade.
1 domain free up to 1,000 emails/month
Microsoft 365
Zoho Mail
The agent does the heavy lifting
Sources identified, SPF and DKIM fixes drafted, each policy step proposed. You approve; nothing ships on its own.
Connect your AI with MCP
30 tools over MCP, so your assistant reads your domains and works the queue.
Connect your DNS manager directly
Approved records go into your own zone at your own provider, across 64. No credentials reach us.
“We evaluated many DMARC providers before choosing Palisade. The quality of their product, the responsiveness and friendliness of their team and their rapid progress on their product roadmap made it a no-brainer for us to move forward.”
Valimail pricing explained (and how Palisade compares)
Valimail's pricing page publishes exactly one number. Everything else (Enforce Premium, Enterprise, Amplify, and MSP pricing) is behind a sales conversation. Here's the published picture as of our check:
What you'd actually pay
The same five buyer sizes on every comparison, so a shape carries from one page to the next.
1 domain, up to 1,000 emails a month
Monitor is free; domain and email allowances are not published
2 set-up domains, up to 100K emails a month
Enforce Starter starts at $5,000/year; domain and email allowances are not published
10 set-up domains, up to 1M emails a month
Enforce Starter starts at $5,000/year; domain and email allowances are not published
20 set-up domains, up to 2.5M emails a month
Enterprise is contact sales; domain and email allowances are not published
Client domains under management, any volume
MSP pricing is not listed on the pricing page
Palisade’s figures are derived from its published tiers. Valimail figures read from their pricing page on 2026-08-28. Plans and prices may have changed since.
How Valimail prices
- Valimail doesn't publish its billing unit or overage policy, so we can't tell you how the bill scales. Ask them directly.
- No free trial of Enforce is published; evaluation happens on the free Monitor tier, which watches but doesn't enforce.
- Their MSP offering (DMARC Pro) exists and is multi-tenant; its pricing is also unpublished.
How Palisade prices
- A Free plan covers one domain and up to 1,000 emails/month; flat monthly IT-team plans from $19/month (not a $5,000 annual commitment) with portfolio-based per-client-domain pricing for MSPs.
- MSP client domains carry no email metering, and paid plans include unlimited report retention.
- 15-day free trial of the full product: enforcement included, not just monitoring.
- White-label prospecting reports and native PSA integrations included for MSPs.
Valimail pricing read from their public pricing page on 2026-07-10.Plans and prices may have changed since.
Try Palisade free on one domain, or start a 15-day full-product trial with no credit card.
What each one covers, and where it stops
Published facts only, read from each vendor's own material. Neither column describes a hands-on trial, because we have not run one.
Valimail is a conventional enterprise DMARC platform for federal and large-enterprise buyers. Its no-cost Monitor tier provides visibility dashboards but not enforcement. The platform also offers one-click authorization for pre-configured senders, Instant SPF, and Amplify for BIMI and VMC management.
Valimail's pricing begins with free Monitor, a visibility tier that does not provide enforcement. Its published Enforce Starter price starts at $5,000/year; pricing for Enforce Premium, Enforce Enterprise, Amplify, and its multi-tenant DMARC Pro MSP offering is contact sales. Valimail also publishes account-enabled APIs and signed HTTP webhooks for selected events.
Palisade is built around an agent that does the DMARC work rather than reporting on it. It identifies every sending source, drafts the SPF and DKIM changes each one needs, and proposes the next policy step when the evidence supports it.
The agent investigates every sender, drafts every fix, and proposes each policy step, you approve before anything ships.
- Provides DMARC report monitoring and analytics
- Provides multi-tenant client management and an MSP partner program
- Provides DNS-delegated DMARC, SPF, and DKIM record hosting
- Provides BIMI through Amplify
- Provides account-enabled APIs and signed HTTP webhooks
- The agent investigates senders and drafts the fix, so the work arrives prepared rather than as a list of findings
- Hosted SPF, DKIM and DMARC on redundant managed DNS, so an approved change can be carried out rather than handed off
- Portfolio workflow for MSPs, with ConnectWise, HaloPSA and Autotask integrations and a free NFR domain
- An MCP server and a REST API, so the same data and workflow are reachable from the AI tools a team already uses
- Does not advertise an AI agent that does the enforcement work
- Does not advertise native ConnectWise, HaloPSA, or Autotask integrations
- Does not advertise white-label client reporting
- Does not publish a free trial of Enforce
- Does not list an MCP server for AI assistants
- Every policy change waits for a human approval, by design: nothing ships on the agent's own authority
- MSP pricing is quoted per client domain rather than published as a rate card
- Plans are sized by monthly email volume, so a low-domain, high-volume sender lands on a higher tier than domain count alone suggests
- Starts at
- $0
- Free tier
- $0 Monitor: visibility, not enforcement
- Enforce entry
- Starting at $5,000/year
- MSP pricing
- Contact sales
- Starts at
- Free, then $19/mo
- Free tier
- 1 domain, up to 1,000 emails/month
- Trial
- 15 days, full product, no credit card
- MSP model
- Quoted per client domain, portfolio-based
“Palisade made it so easy for us to get our blue verified checkmark and achieve our BIMI compliance”
Sources and further reading
Source checks run through 2026-07-10; every entry keeps its individual check date.
- Valimail homepage
Checked 2026-07-10
- Valimail Enforce
Checked 2026-07-10
- Valimail pricing
Checked 2026-07-10
- Valimail MSP program
Checked 2026-07-10
- Valimail API collection
Checked 2026-08-27
- Valimail API overview
Checked 2026-08-27
- Valimail API guide for MTA-STS and TLS reporting
Checked 2026-08-27
- Valimail API Terms of Use
Checked 2026-08-27
- Valimail Enforce user-guide index
Checked 2026-08-27
- Valimail Enforce webhooks
Checked 2026-08-27
- Valimail partner ecosystem
Checked 2026-08-27
- Valimail AI Info
Checked 2026-08-27
- Valimail AI-phishing guidance
Checked 2026-08-27
- Valimail Data Privacy Day post on AI and machine learning
Checked 2026-08-27
Palisade vs Valimail: FAQ
What is the main difference between Valimail and Palisade?
Palisade is agentic DMARC software. Its agent investigates sending sources, works through SPF and DKIM alignment, and moves domains toward p=reject while your team stays in control. When evaluating Valimail, compare that operating model with the workflow in its current product documentation and decide how much work you want your team to carry.
Who should choose Palisade?
Choose Palisade if you want an AI agent to carry routine DMARC work through enforcement, whether you manage one domain or thousands. It is also a natural fit for teams already using Claude, OpenAI, or other AI tools to get operational work done.
Who should choose Valimail?
Choose Valimail if its current integrations, procurement model, or operating workflow better match your requirements. A more operator-led platform can also fit a team that prefers to review reports and make each change itself.
Does Palisade guarantee a specific time to p=reject?
No responsible DMARC platform should promise the same enforcement timeline for every domain. Timing depends on the number of sending sources, access to DNS and third-party systems, and how quickly each legitimate stream can be aligned. Palisade's agent reduces routine investigation and configuration work while operators retain control over policy decisions.
Switching from Valimail takes three steps
- 1
Batch-import your domains
Bring your client domains into Palisade in bulk, or let your ConnectWise, HaloPSA, or Autotask integration sync them automatically.
- 2
Run both platforms in parallel
DMARC reporting supports multiple recipients, so Palisade receives reports alongside Valimail during the overlap, no visibility gap while you evaluate.
- 3
Cut DNS over with Easy API
Re-point delegation to Palisade's hosted records via API-driven DNS deployment, then wind down the Valimail delegation on your schedule.
1 domain free up to 1,000 emails/month
Competitor information on this page was last reviewed against public sources on 2026-07-10. Spotted something out of date? Tell us and we'll fix it.