Fix it in a click - and undo it just as fast
Finding a problem is the easy half. Every email-security fix ends at a DNS record, and editing those by hand in a different control panel per provider is slow and risky. DMARCER connects to your DNS and applies the right record for you - showing the exact change first, and giving you one-click revert if you ever want it back.
DNS providers connected
See the change before it’s published
Revert to exactly where you were
Every fix ends at a DNS record – and that’s the friction
Email security is configured almost entirely in DNS, the system that holds the public settings for your domain. Fixing SPF, publishing or tightening DMARC, turning on MTA-STS – each one comes down to editing a DNS record. So detection is only ever half the job: a tool can tell you precisely what’s wrong, but the change still has to be made by hand, somewhere else.
That “somewhere else” is the problem. Logging into a different control panel for every domain, each with its own quirks, hand-typing records under pressure, and hoping you didn’t fat-finger a neighbouring entry – it’s slow, it’s nerve-wracking, and a single slip can break mail for the whole domain. So fixes get deferred, and known problems sit open longer than they should.
Why this matters – whoever you are
- Running your own domains? You apply the right fix without learning your registrar’s control panel or risking the rest of your zone.
- Managing clients? You stop juggling a dozen different panels and credentials, and act on findings across every client from one place.
Connect a domain’s DNS, and DMARCER does the editing
Once a domain’s DNS is connected, DMARCER applies the right record for you – SPF, DMARC, MTA-STS and more – with surgical precision. It matches only the record it’s meant to touch and rewrites that one alone, never clobbering the rest of the zone. The MX records, website entries and everything else around it are left exactly as they were.
Eight providers, one workflow
DMARCER speaks to the major DNS providers directly, so the experience is the same no matter where a domain is hosted. Credentials are encrypted and scoped to the zone – DMARCER can change the records for the domain you connected and nothing beyond it.
- Cloudflare, Azure DNS, AWS Route 53, Google Cloud DNS
- ICUK, GoDaddy, IONOS, Plesk
- Credentials encrypted and scoped to the zone
- Targeted edits that leave every other record alone
Nothing is ever published blind
DNS changes feel risky because they usually are – you type, you save, and you find out later whether it worked. DMARCER removes that gamble with a simple, reversible sequence: see the exact change, apply it when you’re happy, and undo it in a single click if anything looks off. Safe by default is what makes acting on a finding fast instead of frightening.
1. Preview
See the exact before-and-after for the one record being changed, so you know precisely what will be published before anything happens.
2. Apply
When you’re happy, apply the change and DMARCER writes it straight to your provider – just that record, nothing else in the zone.
3. Revert
If anything looks off, one click restores the previous record exactly – no scrambling to remember what was there before.
The same engine behind hosted SPF and hosted MTA-STS
This isn’t a side feature – it’s the foundation the rest of the platform stands on. The same connect-and-write engine that fixes a record on demand is what lets DMARCER keep hosted SPF valid under the lookup limit and set the records that point at hosted MTA-STS. Connect a domain’s DNS once and every one of those capabilities is unlocked together, with the same precision and the same one-click safety net. See all the DNS integrations →
If you run your own domains
You close findings the moment you see them, without learning a control panel or worrying you’ll knock something else over – with a preview to reassure you and a revert if you change your mind.
If you manage clients
You remediate across every client from one console, with encrypted per-zone credentials and a clean audit of every change – turning DNS fixes from a risky chore into a fast, repeatable service.
Where this fits in the platform
Hosted SPF →
Flattened SPF, kept under the limit.
Hosted MTA-STS →
Policy and certificate, managed.
Enforcement journey →
Where the fixes are taking you.
Integrations →
Every DNS connector in one place.
Stop hand-editing DNS
Run a free check to see what needs fixing – then fix it in a click, with a preview first and revert on standby.
Check your domain