Open-source, self-hosted DMARC monitoring built for agencies.
Agencies run email authentication for dozens of client domains, and hosted DMARC platforms charge per domain and per message volume — which punishes exactly the people with the most to monitor. DMARC Analyzer is the alternative: one workspace, unlimited domains and clients, running on your own infrastructure so client report data never leaves it.
dmarc-analyzer.net · Apache-2.0
- Automatic report ingestion — point a mailbox at the tool and aggregate (RUA) reports are fetched, unpacked, parsed, and de-duplicated on a schedule. No manual uploads.
- Unlimited domains & clients — group domains by client, give each account its own view, and add the 43rd domain at the same price as the first.
- Spoofing & threat detection — unauthenticated sources surface as soon as they appear, with sending IP, volume, and geography.
- Guided path to enforcement — every domain shows what stands between
p=noneandp=reject, with source-by-source SPF and DKIM alignment. - White-label client reports — a clean monthly summary per domain that a non-technical client can actually read.
One image runs in two modes (API and worker), plus PostgreSQL. Requires Docker.
mkdir dmarc-analyzer &&cd dmarc-analyzer
curl -fsSL -o compose.yml https://raw.githubusercontent.com/dmarc-analyzer-net/DmarcAnalyzerApp/main/deploy/compose.yml
# generate the key that encrypts mailbox credentials at restecho"DMARC_ENCRYPTION_KEY=$(openssl rand -base64 32)"> .env
docker compose up -dOpen http://localhost:8080 and create the first admin account.