Email authentication and domain security

Stop people sending email as you.

Attackers spoof business domains to trick customers and staff into paying fake invoices. Suped helps us set up and monitor SPF, DKIM, DMARC and MTA-STS so your domain is protected and your genuine email gets delivered.

DMARC enforcement
From monitoring to full protection, step by step
SPF & DKIM
Records set up, aligned and kept within limits
MTA-STS
Enforced encryption for mail sent to your domain
About the partnership

Why we work with Suped.

Email authentication is one of the most effective protections against impersonation and invoice fraud, and the major mailbox providers now expect it. But SPF, DKIM and DMARC are easy to get wrong, and a bad change can stop legitimate email from arriving.

Suped turns DMARC reports into clear dashboards showing every service that sends email as your domain. That lets us authorise the legitimate senders, move safely to enforcement and keep watch as new tools are added.

FAQ

Frequently asked questions

What is DMARC?

DMARC is an email standard that tells receiving mail servers what to do with messages that fail SPF and DKIM checks for your domain — monitor them, send them to junk or reject them. It’s the main defence against attackers sending email that pretends to come from you.

Will DMARC break our email?

Not when it’s rolled out properly. We start in monitoring mode, use Suped to find every service sending as your domain, fix their SPF and DKIM, and only then move to quarantine and reject.

What are SPF and DKIM?

SPF lists the servers allowed to send email for your domain. DKIM adds a cryptographic signature that proves a message wasn’t altered. DMARC builds on both.

What is MTA-STS?

MTA-STS tells other mail servers they must use an encrypted, verified connection when delivering email to your domain, helping prevent interception and downgrade attacks.

Why does this matter now?

Major providers including Google and Yahoo now require SPF, DKIM and DMARC for bulk senders, and ASD recommends email authentication to combat fake emails. Without it, your email is easier to spoof and more likely to land in junk.

Is your domain protected from spoofing?

Tell us your domains and the services that send email for you. We’ll check your SPF, DKIM and DMARC and map a safe path to enforcement.