TLDR: Valimail is an automated DMARC platform that identifies the services sending email as your domain by name, configures SPF and DKIM for them, and gets you to enforcement without manual DNS work. The big difference from most DMARC vendors is time: a median of 45 days to enforcement, against 300 to 600 days for platforms that leave sender identification to you.
Most DMARC vendors sell you the same thing at the surface level. Reports, a dashboard, a path to p=reject. The demos look similar. The feature lists rhyme, but the difference shows up six months later.
That’s when you’re still at p=none because nobody on your team has had time to figure out what “104.47.51.33” is, whether it’s legitimate, and who inside the company signed up for it.
That gap between buying an Email Trust/DMARC platform and getting to real protection is where most implementations die. Learn what Valimail does, how it works, how it compares to the rest of the market, and where it isn’t the right fit.
What is Valimail?
Valimail is an automated email deliverability and DMARC platform. Valimail was acquired by DigiCert, a global leader in digital trust, in September 2025. Together, Digicert and Valimail are bringing the power of zero trust email authentication to every inbox, identity, and interaction.
It gives organizations visibility into every service sending email on their behalf, authenticates those services, and gets the domain to DMARC enforcement (p=reject) without requiring manual DNS changes for each sender.
We don’t just get you to enforcement — we continuously operate your email’s trust and identity at scale.
Valimail pioneered automated DMARC in 2015 and has been the highest-rated DMARC solution on G2 for four consecutive years (most recently in the Summer 2026 report).
The product suite breaks into three parts:
- Monitor gives you free visibility into every service sending as your domain, identified by name rather than IP address. This is the diagnostic layer, and it costs nothing.
- Enforce takes you from visibility to protection. It automates SPF, DKIM, and DMARC record management, handles sender authorization, and gets the domain to enforcement.
- Amplify adds BIMI (Brand Indicators for Message Identification), which puts your verified logo in the recipient’s inbox and unlocks Google’s blue checkmark.
How Valimail works
The mechanics of DMARC are the same regardless of vendor. Where platforms diverge is in how much of the work you do yourself.
- See who’s sending. DMARC aggregate reports arrive as raw XML listing IP addresses. Most platforms hand you those IPs, sometimes with basic grouping. Valimail resolves them to named services: not “104.47.51.33,” but “Microsoft 365.” Over 1,000 sending services are identifiable by name.
- Authorize the legitimate ones. Every real sender needs SPF and DKIM configured correctly and aligned to your domain. In a manual workflow, this means a DNS change per sender, a ticket, a review, a change window, and a retest. In Valimail, it’s a one-click authorization against a record that updates dynamically.
- Solve SPF. SPF caps DNS lookups at ten. Any organization running Microsoft 365, Salesforce, a marketing platform, and a support desk will blow through that ceiling. Most vendors handle this with SPF flattening, which compresses lookups into raw IPs and then breaks the moment a vendor rotates their infrastructure. Valimail’s patented Instant SPF® removes the limit entirely with a private, dynamically generated record. No flattening, no maintenance, no re-flattening every quarter.
- Enforce and hold. Getting to p=reject once isn’t the finish line. Sending ecosystems drift. Marketing adds platforms. Vendors change IPs. Continuous monitoring & execution catches the drift before it becomes a deliverability problem.
Why Valimail?
Valimail has been the market leader since automated DMARC existed and is the #1 platform on G2 for 4 years running.
Valimail didn’t join this category. It started it, pioneering automated DMARC in 2015. Since then:
- 8.6 billion+ bad actors blocked
- 95% of customers reach continuous enforcement
- 100% accuracy on SPF record management, with zero manual maintenance
- 99.995% uptime across swappable global points of presence
Valimail also co-chairs the DMARC IETF Working Group, the M3AAWG Working Group, and the BIMI Working Group, and co-authored the ARC protocol. The standards that govern email authentication are partly written by people who work here.
That’s not hyperbole, either. It’s why the platform tends to support new standards before competitors do.
How Valimail compares to other DMARC platforms
Representative vendors by tier:
- SMB solutions: EasyDMARC, MxToolbox
- Mid-market solutions: Mimecast, dmarcian
- Enterprise solutions: Proofpoint, Fortra, Cisco
Then, there’s Valimail.
Here’s how they all compare.
| Metric | Valimail | SMB solutions | Mid-market | Enterprise |
| Enforcement rate | 95%+ | Under 20% | 20–40% | 40–60% |
| Median time to enforcement | 45 days | 300–400 days | 300–400 days | 500–600 days |
| Domain growth | 60% | 0–5% | 5–10% | 10–20% |
Look at the enforcement rate row for a second because it’s the one that matters and it’s the one nobody talks about in a demo.
Under 20% of customers on SMB DMARC platforms reach enforcement. No, that’s not “reach enforcement slowly.” That’s reach it at all.
The other 80% bought a DMARC solution, did some work, and remain spoofable. Mid-market platforms roughly double that, and enterprise platforms roughly triple it, but even at the enterprise tier, 40 to 60% still means a coin flip.
The reason isn’t that those platforms are badly built. It’s that they hand the hard part back to you.
- Identifying senders
- Chasing internal owners
- Managing DNS changes
- Maintaining SPF
This is major work, and it competes with everything else on your team’s plate. Projects that depend on sustained manual effort just tend to stall.
| Capability | Valimail | SMB | Mid-market | Enterprise |
| SPF lookup limit | Patented Instant SPF®, unlimited lookups, private record, auto-generated | SPF flattening (brittle, risks blocking good email) | SPF flattening (brittle, risks blocking good email) | Unlimited lookups and private SPF record, typically at additional cost |
| Sending service identification | Largest network of named services | Dozens of services | Hundreds of services | Hundreds of services |
| Adding new senders | One-click authorization | Manual intervention | Manual intervention | Manual intervention |
| DKIM, SPF, DMARC record management | Fully automated | No automation | No automation | Limited automation |
| DNS management | One-time setup, one-click sender enablement | DNS change required per change | DNS change required per change | Limited DNS changes required |
| BIMI | Fully automated, multi-brand and multi-domain | Minimal to none | Minimal to none | Varies; may require third-party support |
Feature comparisons are based on aggregated internal analysis and publicly available information reviewed as of July 2026. Capabilities and performance may vary depending on customer configuration, deployment model, and service tier. Where competitor information is referenced, it reflects publicly available materials and may not capture all product capabilities. Comparisons are intended for general informational purposes only and do not represent a guarantee of performance.
What Valimail customers say
Valimail is the highest-rated DMARC solution on G2 and has held that position for four consecutive years.
- “Valimail makes it super easy to monitor DMARC reports for someone who’s not a full-time email administrator.” – Jason B., Director of Technology
- “The Valimail dashboard lets me see what services and IP addresses are sending mail on our behalf as well as checking reported bounces according to our policies.” – Isaac M., Event Director
- “DMARC is incredibly frustrating to handle manually, but with Valimail it collects all logs and makes it easier to interpret and find any issues.” – Verified User on G2
Ultimately, nobody praises the reporting UI. They praise not having to be a full-time email administrator. That’s the product.
Who Valimail is right for
There’s a good, better, and best fit for Valimail users. Here’s when it’s the right use case:
- Organizations without a dedicated email authentication specialist. If DMARC is one item on a long list for a small IT or security team, automation isn’t a nice-to-have. It’s the difference between reaching enforcement and not.
- Organizations with sprawling sender ecosystems. If marketing, sales, support, HR, and finance are all sending email through their own platforms, manual sender identification becomes a permanent job.
- Regulated industries and government. FedRAMP authorization is a hard requirement for federal agencies and many contractors, and Valimail is the only DMARC vendor that holds it.
- Organizations managing large domain portfolios. Subsidiaries, acquired brands, regional entities, and defensive registrations all need coverage, and per-domain manual work doesn’t scale.
Who Valimail isn’t right for
Valimail isn’t right for every DMARC use case:
- If you want maximum manual control over every DNS record. Valimail’s model is automation. If your team wants to hand-craft every SPF and DKIM record and considers that a feature rather than a cost, a more DIY approach may suit you better (with the tradeoff of lack of sleep, increase in stress and having to dedicate internal time and resources).
- If price is the only variable. Entry-level DMARC platforms are cheaper on the subscription line. If your organization has one domain, three senders, and an engineer with time, the cheapest option may be the right one. The automation argument gets stronger as complexity grows.
- If you need brand protection beyond email. Valimail’s domain monitoring covers lookalike domain registration and email-based impersonation. It doesn’t cover social media impersonation, marketplace counterfeits, or mobile app fraud. If those are your primary risks, a digital risk protection platform might be the better fit like Sublime or Abnormal.
Where to start
The fastest way to evaluate any email trust platform is to find out what’s happening on your domain right now.
Don’t just take our word for it — see for yourself. Check your domain to see where your authentication stands today.
Next, Valimail Monitor is free, takes minutes to set up, and shows you every service sending as your domain, by name. No trial, no credit card, no obligation.
Frequently asked questions
What is Valimail?
Valimail is an automated DMARC platform that helps organizations identify every service sending email as their domain, authenticate those senders, and reach DMARC enforcement without manual DNS work. It pioneered automated DMARC in 2015 and has been the top-rated DMARC solution on G2 for four consecutive years.
How is Valimail different from other DMARC vendors?
The core difference is automation. Most DMARC platforms give you reports and leave sender identification, SPF and DKIM configuration, and DNS management to your team. Valimail identifies senders by name rather than IP address, automates authentication and record management, and eliminates the SPF 10-lookup limit through patented Instant SPF®. The practical result is a median time to enforcement of 45 days, against 300 to 600 days for platforms that leave the manual work with you.
Is Valimail free?
Valimail Monitor is free with no trial period, credit card, or obligation. It gives you full visibility into every service sending email on your domain. Enforce and Amplify are paid products, priced by quote based on your domains and sending environment.
Does Valimail work with Microsoft 365 and Google Workspace?
Yes. Valimail is an official Microsoft 365 partner with full API integration and an official Google Workspace partner with full integration. Both connections are deeper than the limited integrations typically offered by competing platforms.
