Updated December 1, 2025 to include new updates
The United Kingdom National Cyber Security Center (NCSC) has announced changes to its Mail Check service. In March 2025, the NCSC scaled back some key features, including their detailed DMARC aggregate reporting, so they can focus on making basic email security checks accessible to a larger audience.
On March 31, 2026, NCSC is retiring web check and mail check, and organizations will need alternatives to these solutions.
This shift marks a pivotal moment for UK-based organizations, particularly those relying on Mail Check for insights into email security and domain protection since 2022. Here’s what you need to know about these changes and what you can use as a free alternative.
What do these changes mean?
Abandoning DMARC aggregate reporting compromises your ability to identify and address email-based threats. It significantly increases the risk that a phishing attack will be successful on your domain. It also makes it harder to comply with email security standards and regulations at the local and global levels.
For instance, the Cyber Assessment Framework (CAF) emphasizes the need for DMARC solutions to detect and reduce the risk of cyberattacks. DMARC aggregate reporting is a critical component in these efforts and enables organizations to track email activity and maintain compliance.
DMARC is not a one-and-done solution; it demands monitoring and updates to always adapt to evolving security threats. Aggregate reporting is a cornerstone of DMARC monitoring, ensuring email security and deliverability. Not being able to monitor these reports can disrupt your legitimate email communication while also undermining brand trust, especially in the public sector.
Why is DMARC reporting important for UK organizations?
Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a critical tool for preventing phishing and email spoofing attacks. By analyzing DMARC reports, organizations can:
-
- Identify potential threats
-
- Maintain brand reputation
-
- Ensure email deliverability
-
- Protect public trust
-
- Prevent phishing
Valimail Monitor: A forever free alternative to the UK Mail Check
As the UK NCSC phases out Mail Check’s advanced features, organizations need a reliable alternative and additional DMARC solutions to fill in the gap. That’s where Valimail comes in.
Valimail Monitor offers functionalities for free that can protect your domain. Here’s how Valimail Monitor and Mail Check are different:
| Valimail Monitor | Mail Check after March 2025 | |
| DMARC aggregate reporting (RUA) | ✓ – provided in a digestible format | X |
| DKIM Checks | ✓ | X |
| Real-time Alerting and Monitoring | ✓ | Limited |
| Advanced Analysis Tools | ✓ | X |
| TLS reporting | ✓ | X |
Valimail Monitor not only provides the same functionality as Mail Check’s current DMARC reporting but also enhances it with a focus on usability, ensuring even non-technical users can stay protected.
And the best part is that Valimail Monitor is forever free and isn’t going anywhere anytime soon.
All you have to do is create an account – no trials or payment information required. Together with our trusted UK partner Gradian, Valimail delivers the visibility you need for successful DMARC management.
Frequently asked questions about NCSC Mail Check alternatives
Why is NCSC retiring Mail Check and Web Check?
The NCSC is shifting its focus toward making essential cybersecurity tools accessible to a larger audience. As part of this strategy, it is retiring Mail Check and Web Check on March 31, 2026, and previously scaled back advanced features—like DMARC aggregate reporting—in March 2025. This allows the NCSC to concentrate its resources on broad foundational services rather than detailed reporting or advanced diagnostics.
What risks do organizations face without DMARC aggregate reporting?
Without DMARC aggregate reporting, organizations lose the ability to see who is sending email on their behalf and whether those messages pass authentication. This visibility gap increases exposure to phishing, spoofing, and impersonation attacks. It also makes it harder to meet the compliance expectations outlined in frameworks like the Cyber Assessment Framework (CAF), which considers DMARC monitoring essential for reducing cyber risk.
What free alternatives are available now that Mail Check features are being reduced?
As Mail Check scales back and approaches retirement, UK organizations can turn to Valimail Monitor, a forever-free DMARC visibility solution. Unlike the current version of Mail Check, Valimail Monitor provides digestible DMARC aggregate (RUA) reporting, DKIM checks, TLS reporting, real-time alerts, and more—making it easier for even non-technical users to understand and secure their email ecosystem.
What does the retirement of Mail Check and Web Check mean for my organization?
As of March 31, 2026, organizations will no longer receive findings from the NCSC’s Mail Check or Web Check services, though Early Warning and DNS Check will continue as usual. To maintain visibility into web and email security risks, the NCSC strongly recommends implementing a commercial External Attack Surface Management (EASM) product, supported by their buyer’s guide, which outlines features such as attack-surface visibility, security analysis, and workflow tools. Organisations are also encouraged to subscribe to the Check your cyber security service for essential email anti-spoofing and email privacy checks. These retirements align with the NCSC’s ACD 2.0 roadmap, allowing the agency to prioritize areas where government involvement adds unique value and shift resources toward broader national cyber-resilience initiatives.
