The National Cyber Security Center (NCSC) has announced changes to its Mail Check service. Starting in March 2025, the NCSC will scale back some key features, including their detailed DMARC aggregate reporting, so they can focus on making basic email security checks accessible to a larger audience.
This shift marks a pivotal moment for UK-based organizations, particularly those relying on Mail Check for insights into email security and domain protection since 2022. Here’s what you need to know about these changes and what you can use as a free alternative.
What do these changes mean?
Abandoning DMARC aggregate reporting compromises your ability to identify and address email-based threats. It significantly increases the risk that a phishing attack will be successful on your domain. It also makes it harder to comply with email security standards and regulations at the local and global levels.
For instance, the Cyber Assessment Framework (CAF) emphasizes the need for DMARC solutions to detect and reduce the risk of cyberattacks. DMARC aggregate reporting is a critical component in these efforts and enables organizations to track email activity and maintain compliance.
DMARC is not a one-and-done solution; it demands monitoring and updates to always adapt to evolving security threats. Aggregate reporting is a cornerstone of DMARC monitoring, ensuring email security and deliverability. Not being able to monitor these reports can disrupt your legitimate email communication while also undermining brand trust, especially in the public sector.
Why is DMARC reporting important for UK organizations?
Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a critical tool for preventing phishing and email spoofing attacks. By analyzing DMARC reports, organizations can:
-
- Identify potential threats
-
- Maintain brand reputation
-
- Ensure email deliverability
-
- Protect public trust
-
- Prevent phishing
Valimail Monitor: A forever free alternative to Mail Check
As the NCSC phases out Mail Check’s advanced features, organizations need a reliable alternative and additional DMARC solutions to fill in the gap. That’s where Valimail comes in.
Valimail Monitor offers functionalities for free that can protect your domain. Here’s how Valimail Monitor and Mail Check are different:
Valimail Monitor | Mail Check after March 2025 | |
DMARC aggregate reporting (RUA) | ✓ – provided in a digestible format | X |
DKIM Checks | ✓ | X |
Real-time Alerting and Monitoring | ✓ | Limited |
Advanced Analysis Tools | ✓ | X |
TLS reporting | ✓ | X |
Valimail Monitor not only provides the same functionality as Mail Check’s current DMARC reporting but also enhances it with a focus on usability, ensuring even non-technical users can stay protected.
And the best part is that Valimail Monitor is forever free. All you have to do is create an account – no trials or payment information required. Together with our trusted UK partner Gradian, Valimail delivers the visibility you need for successful DMARC management.
Sr. Content Marketing Manager at Valimail
Alyssa Harmon