DMARC Reports, version 1.0

See who sends email as your domains.

Mail providers send you daily DMARC reports as zipped XML files. DMARC Reports reads them for you, names every sender and tells you when it's safe to block everyone else. It runs on your own Cloudflare account.

View on GitHub How to install

Free for you or your organisation, on up to 10 of your own domains. Source available.

A domain in DMARC Reports: one sender to fix, the DMARC record to add and every sender named

// why

DMARC without the guesswork.

Every sender namedGoogle Workspace, Microsoft 365, Mailchimp and the rest, recognised. Mark each one Mine or Not mine.

A safe path to p=rejectStep up in stages. Each step goes green only when your own email all passes.

Records to copyThe exact DNS record, with steps for your DNS host and a copy button.

Alerts and a weekly summaryAn email when a new sender turns up or something stops passing.

// how it works

Reports in. Plain English out.

Install it

One command puts it on your own Cloudflare account, with its own web address.

Point your reports at it

Add your domains. The app gives you the DMARC record to paste, with your report address in it.

Fix, then tighten

Fix the senders that fail, then follow the steps to quarantine and reject.

TLS reports tooSee whether mail to your domains arrives encrypted.

Private share linksA read-only view for a colleague or your IT person, for 14 days.

Every row as CSVDownload it all, or upload report files you already have.

Your CloudflareReports go straight to your account and never come to me.

Agency or host?

Offer it to your clients.

Put your own name, logo, colour and support address on every page and email, and run it for the businesses you look after. Using it for clients, hosting it for others or offering it under your own brand needs a commercial licence. Tell me what you have in mind and we'll work something out.

Talk to me

DMARC Reports with an IT company's own name and colours

// get it

Three ways to install.

Every way installs into your own Cloudflare account. The free plan is fine for most people. You need a domain with Cloudflare Email Routing for your report address, and a spare domain works well.

View on GitHub

Read the set-up steps

Get an email when there's a new version

The installerrecommendedOne command. It makes the database, gives the app its address, routes your report address and hands you a link to set your password.

Deploy to Cloudflareone clickCopies DMARC Reports to your GitHub and deploys it. Choose a set-up code, then open the app to finish.

From the codefor developersClone the repo and deploy it with Wrangler. The README walks you through it.

~/dmarc-reports

npx @mrpwob/dmarc-reports help
npx @mrpwob/dmarc-reports setup

# help lists the Cloudflare token to make. the README has the details.

// built with

What's under the hood.

Everything runs on Cloudflare's developer platform, in your own account.

Cloudflare Workers
D1
Email Routing
Cron Triggers
TypeScript

// questions

Questions.

Is it really free?

Yes, for you or your organisation on up to 10 of your own domains. Cloudflare's free plan covers most people, and Cloudflare bills you directly for anything past it.

Can I see the code?

Yes. It's source available: you can read, change and run the code under the Business Source License 1.1. Each version moves to the Apache 2.0 licence four years after its release.

Can I use it for my clients?

Yes, with a commercial licence. That covers agencies, IT support companies, hosts and anyone offering it under their own brand. Use the contact page to talk to me.

Do my reports come to you?

No. Reports go to an address on your own domain and straight into your own Cloudflare account. I never see them.

What's a DMARC report?

A daily summary from mail providers such as Google, Microsoft and Yahoo of every message that claimed to come from your domain, and whether it passed the checks.

Where do I get help?

Bugs go in GitHub issues, where everyone can see the answers. For anything else, use the contact page.

Stay in the loop

Subscribe for updates.

Leave your email and I'll tell you when there's a new version of one of my apps, or a new project to try. Nothing else.