Email & Domain · S-MAIL-1

SPF / DKIM / DMARC to Enforcement

Get SPF, DKIM and DMARC records set up, with DMARC reports turned on at p=none.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Compare 3 tiers Book a call

S-MAIL-1

Stop spoofed email

Pricing

Compare tiers

Pay the deposit to start. Pay the final balance before handoff.

Starter

$350

Hours. 2.5 hours

Scope. 1 domain, ≤3 sending services

Deliverables

Records
p=none DMARC
report setup

Turnaround. 2 business days

Pay deposit ($175) Pay final balance ($175)

Balance is due before handoff.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Standard

$750

Hours. 6 hours

Scope. ≤3 domains, ≤8 senders

Deliverables

Starter items
30-day report review to p=quarantine

Turnaround. 30 days

Pay deposit ($375) Pay final balance ($375)

Balance is due before handoff.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Advanced

$1,500

Hours. 12 hours

Scope. ≤10 domains

Deliverables

Standard items
staged move to p=reject over 60 days

Turnaround. 60 days

Pay deposit ($750) Pay final balance ($750)

Balance is due before handoff.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Retest included: Starter, one retest of Critical and High findings within 30 days; Standard, one retest of all findings within 45 days; Advanced, two retests within 60 days. Another round is the Extra Retest add-on.

Scope

Deliverables, limits, and standards

Standards mapping

Google sender guidelines (Feb 2024; 5,000+/day senders need SPF, DKIM, DMARC); Yahoo sender requirements; NIST CSF 2.0 PR.PS.

Exclusions

Deliverability guarantees
inbox placement
ESP account fixes the client cannot grant access to

Acceptance

All in-scope domains pass SPF/DKIM alignment for listed senders in DMARC aggregate reports at handover.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Book a call All security services

Not sure this tier is the one?

Email [email protected] with the system you want reviewed. We will point at a tier in this catalog, or tell you if the work is outside it.

Book a call All security services

SPF / DKIM / DMARC to Enforcement

Compare tiers

Starter

Standard

Advanced

Deliverables, limits, and standards

Standards mapping

Exclusions

Acceptance

More in Email & Domain

Not sure this tier is the one?