
Attackers spoof business domains to trick customers and staff into paying fake invoices. Suped helps us set up and monitor SPF, DKIM, DMARC and MTA-STS so your domain is protected and your genuine email gets delivered.
Email authentication is one of the most effective protections against impersonation and invoice fraud, and the major mailbox providers now expect it. But SPF, DKIM and DMARC are easy to get wrong, and a bad change can stop legitimate email from arriving.
Suped turns DMARC reports into clear dashboards showing every service that sends email as your domain. That lets us authorise the legitimate senders, move safely to enforcement and keep watch as new tools are added.
Suped powers the domain protection layer of our wider email security service.
DMARC is an email standard that tells receiving mail servers what to do with messages that fail SPF and DKIM checks for your domain — monitor them, send them to junk or reject them. It’s the main defence against attackers sending email that pretends to come from you.
Not when it’s rolled out properly. We start in monitoring mode, use Suped to find every service sending as your domain, fix their SPF and DKIM, and only then move to quarantine and reject.
SPF lists the servers allowed to send email for your domain. DKIM adds a cryptographic signature that proves a message wasn’t altered. DMARC builds on both.
MTA-STS tells other mail servers they must use an encrypted, verified connection when delivering email to your domain, helping prevent interception and downgrade attacks.
Major providers including Google and Yahoo now require SPF, DKIM and DMARC for bulk senders, and ASD recommends email authentication to combat fake emails. Without it, your email is easier to spoof and more likely to land in junk.