Email authentication
Make it much harder for anyone to send email as your exact domain.
Three domain records decide whether mail that claims to come from your company is trusted. We set SPF, DKIM, and DMARC up properly, watch the reports until every real sender passes, then turn enforcement on so forged mail is rejected and your own mail is easier for other systems to trust.
The problem, and what we do about it
Anyone can type your domain into the from line of an email. SPF, DKIM, and DMARC are the published records that let the receiving mail system check whether a message really came from you. Many small business domains have a partial SPF record, no DKIM, and either no DMARC or one set to do nothing, which is how a fake invoice with a real looking address gets through. Large mail providers now also expect these records from anyone sending in volume.
Turning enforcement on without preparation breaks real mail. Payroll systems, your website's contact form, the scanner that emails PDFs, and marketing tools all send as your domain. So we start in monitoring mode, read the DMARC reports to find every system sending for you, fix or add their records, and only then move to quarantine and finally reject. At the end you get a record of every sender and every setting that was published. The free email security check shows where your domain stands today.
Who it's for
Honest on purpose, so nobody wastes a call.
A good fit
- Businesses that send invoices, statements, or appointment reminders by email
- Firms that have seen a fake email using their own address, or a customer who received one
- Offices whose insurer, bank, or customer asks whether DMARC is enforced
Not a fit
- Stopping lookalike domains or a vendor whose account was taken over. See email fraud protection for the wider problem
- Marketing email consulting. We make sure the records are right and your senders pass
What you get
Written down so there are no surprises on the quote.
What's included
- Every system that sends as your domain found, from the mail service to the scanner and the website form
- SPF, DKIM, and DMARC records written and published for each domain in scope
- DMARC reporting turned on and read, so nothing legitimate is blocked by surprise
- Enforcement moved to quarantine and then reject once reports show your real senders passing
- Records for unused domains you own set so they cannot send at all
- A written record of every sender and setting, with the date each change was made
What it's not
- Stopping fake mail from lookalike domains, display name tricks, or a hacked account
- Changes inside other companies' systems, such as a vendor's mail server, which they make
- Ongoing report monitoring after enforcement, unless it is added to monthly care or quoted
- DNS hosting fees or a paid reporting service, if one is used, which are listed on the quote
What it costs
New services are quoted after a short review, so the price fits your setup instead of a guess. You get a fixed price in writing before any work starts.
| What | Price |
|---|---|
| Email authentication, setup through enforcement | Quoted after a short review |
| Free email and domain security check | Free |
| Watching the reports after enforcement | Quoted, or added to monthly care |
| Email fraud protection review, accounts and payment rules included | Quoted after a short review |
See the price for this on the pricing page
The quote names the domains and the sending systems it covers. A domain with many senders takes longer than one that only sends from Microsoft 365, and the price says so up front.
What it depends on
- Access to your domain's DNS records, or the person who controls them
- A list of every service that sends email as your company, which we help you build from the reports
- Time in monitoring mode before enforcement. Reports arrive daily, and every real sender has to show up and pass before anything is rejected
Scheduling
Monitoring runs first. Enforcement is turned on once the reports show your real senders passing, which is usually a matter of weeks rather than days.
Next step
Run the free email security check, then book a 15-minute call with the result.
How it works
Simple on purpose. You always know what's next and what it costs.
A 15-minute call
Tell us what's going on. We'll tell you honestly if we're a fit.
A quick look
A short visit or a remote session so we see your setup for real.
A fixed price in writing
What we'll do, what it costs, and when. The price doesn't move.
Scheduled work
We book a time that doesn't shut your business down, then get it done. Reply times and support hours are on the service levels page.
Questions owners ask
Our email check already says we have SPF. Is that enough?
No. SPF alone covers one check and is easy to get wrong. DKIM signs each message, and DMARC tells receiving systems what to do when a message fails and reports back to you. Enforcement needs all three, set to reject.
Can this break our email?
Not if it is done in order. That is what the monitoring period is for. Every system sending as your domain shows up in the reports, and each one is fixed before enforcement is turned on. Switching straight to reject without that step is how real mail gets lost.
Does this stop all fake emails?
It stops forged mail that uses your exact domain, once enforcement is on. It does not stop a lookalike domain, a fake display name, or a message from a real account someone broke into. Those need the account and staff work on the email fraud protection page.
We own a few extra domains we never send from. Do they matter?
Yes. An unused domain with no records is the easiest one to forge. We publish records that say it sends no mail at all.
What does it cost?
It depends on how many domains you have and how many systems send as them, so we quote it after a short review. The price is fixed in writing before we start.
Sources we used
Public guidance we relied on for the facts on this page. None of it endorses Vektrion.
Ask a quick question, get a straight answer
Three fields. You hear back the same business day by text or email, whichever you give us.
Stop being your own IT person.
Tell us what's bugging you. In 15 minutes you'll know what it takes to fix and roughly what it costs.