vb.business vb.business
Area of work

Business email that actually arrives

An email that lands in spam costs what a missed phone call costs, except nobody tells you it happened.

When you need it

  • Quotes and invoices "never arrived", and you always find out too late.
  • Somebody sends email pretending to be your company, and your clients notice before you do.
  • Newsletters go out, but the open rates do not add up.

What's included

  • Checking SPF, DKIM and DMARC for every sender, not just for the main system.
  • DMARC alignment, and a staged move from watching to a policy that protects.
  • Reading the DMARC reports to see who is sending mail in your name.
  • A census of legitimate senders: ERP, CRM, e-commerce, newsletter, invoicing.

How I work

  1. 1A snapshot of where things stand: who sends on your behalf, and what the records really say.
  2. 2Fix the records and monitor in observation mode, blocking nothing yet.
  3. 3Tighten the policy only once the reports say it is safe to.

Frequently asked questions

Increasingly, yes. Google and Yahoo made authentication mandatory above 5,000 messages a day, Microsoft began rejecting unauthenticated mail to Outlook accounts, and the threshold keeps coming down. But the real reason is different: without DMARC, anyone can send invoices in your domain's name.

Almost never. SPF, DKIM and DMARC are DNS records: they are fixed where the domain lives, and they work with Google Workspace, Microsoft 365, your host's mail server or a self-hosted mailbox. You change provider only when the provider is the problem.

The records are corrected in an afternoon, but the policy is not tightened straight away: it takes two or three weeks of reports to be sure no legitimate sender gets blocked, and it is nearly always the ERP or the newsletter platform nobody remembered.

Outcome

  • Email arrives, and when it does not, you know why.
  • Your domain can no longer be used to impersonate your company.
  • Google, Yahoo and Microsoft requirements met before they become a problem.

Tools

SPF DKIM DMARC MTA-STS Report & monitoring

How is your own domain doing?

Expiry, registrant, SPF, DMARC: ten seconds, free, without leaving an address.

Check your domain

Want to know if this is the right area for your situation?

Let's talk