DMARC Management & Monitoring

Stop anyone pretending to be you.

Email spoofing is the #1 vector for invoice fraud, CEO fraud and phishing attacks on your customers. DMARC, SPF and DKIM fix it — but most implementations are half-done and silently failing. We deploy the full stack and monitor it continuously, using our own SaaS platform, DMARC Busta.

Scan your domain in seconds

Run an instant check of your SPF, DKIM and DMARC records. No signup, no credit card.

The software is the easy part

DMARC Busta collects the reports and can advance your policy on its own once senders are passing consistently. That part is solved, and we solved it. What it can't do is tell you whether the unfamiliar sender that just appeared is your new booking platform or somebody preparing to invoice your clients in your name.

That judgement is the service:

• We decide what's legitimate. Automation approves what passes. A human has to look at the sender nobody recognises — because waving a stranger through is precisely how a domain gets handed to an attacker with a tick beside it.
• Someone is accountable when mail stops. Automatic rollback is a feature. A person who calls your largest client to explain the bounced invoice is a service.
• It reaches enforcement. Self-managed DMARC stalls at p=none or 80% of the way to reject, indefinitely. We take DNS access on day one and drive it the whole way.
• Your senders keep changing. New CRM, new mail platform, new invoicing tool, a marketing agency sending on your behalf — each can silently break alignment, and none announce it.
• A monthly read, not another dashboard. What changed, what it means, whether you need to act.

You could licence the tool yourself

And we'd rather say so here than have you discover it after signing. DMARC Busta starts at $19/month and covers a single domain free. If you're fluent in DNS, you can read an aggregate report, and you'll genuinely give it an hour a month — take the free tier. We mean it.

What you're paying us for is not the software. It's the decisions, the accountability, and the job actually finishing. Most people who start self-managed end up here, and it's rarely because the tool disappointed them — it's because the hour a month never appeared.

Why HCS

• We built the platform. DMARC Busta is our SaaS — you're working with the people who wrote it. Other MSPs pay to use it.
• Actual deployment experience. DMARC isn't a checkbox. We've handled real tenants with dozens of senders, subdomains, SaaS integrations and edge cases.
• Plain-English reports. No cryptic XML — a monthly summary of what changed and what to do.

Pair it with Email Spam Protection (inbound)

DMARC stops anyone forging your domain — that's outbound reputation. Our Email Spam Protection handles the other half: inbound threats — spam, phishing and malware stopped before they reach your team's inbox. Most Perth businesses need both; we run them together so your domain's email posture is sound in both directions.

FAQ

Isn't DMARC included in Microsoft 365 or Google Workspace? No. They give you the ingredients — you still have to publish the records, align every third-party sender, and move to enforcement without breaking anything. That configuration work, and keeping it correct as your tools change, is what this service is.

Will this break our email? Not if it's staged, which is exactly why this is a managed service rather than a one-off job. We publish in monitoring mode first, watch the reports until every legitimate sender is accounted for, then tighten to enforcement. Going straight to p=reject is how people lose mail.

Do you need to host our email or website? No. This works on any domain, wherever your mailboxes and site live. We need access to your DNS records, or someone who can make the changes we send through.

How long until we're protected? Records go in within a few days of getting DNS access. Reaching full enforcement typically takes four to six weeks — that window is us watching real mail flow so nothing legitimate gets caught.

Is the price per domain? Yes — $99/month + GST covers one domain. Extra domains, including parked ones you never send from, are quoted together; ask and we'll price the set.

Ready to lock your domain down?

Pricing and checkout are below. If you'd rather we looked at your domain first, get in touch and we'll check your records and tell you straight — no charge.