Adding a domain takes a minute.
Then the work starts.
Most DMARC tools stop at “your record is installed”. That is the easy part. What decides whether you ever reach p=reject is whether anyone is still watching six months later — and nobody reads raw XML for six months.
-
01
Point your reports at us
Add the domain, copy the rua address into your DMARC record. We show you the exact line to paste, whoever hosts your DNS — we hold no key to your zone and never write to it. Nothing else changes: at p=none no mail is affected.
This is the minute. Everything below happens without you.
-
02
Reports arrive and get read
Every receiving provider sends a compressed XML file, daily, per domain. We ingest and parse them into something with names in it: which service sent, how many messages, and whether SPF and DKIM lined up with your domain.
-
03
A digest every morning
This is the part that makes the difference. One email, daily, on the days there is traffic to report: open incidents first, then a row per domain with messages sent and DKIM and SPF pass/fail counts.
Daily email security digestYour report for 15 Sep 20261 open incident · company.com — 2,918 messages from an unrecognised senderDomain Messages DKIM SPF company.com 18,432 18,270 / 162 18,301 / 131 shop.company.com 4,120 4,120 / 0 4,120 / 0 mail.company.ro 612 551 / 61 612 / 0 Thirty seconds a morning is a habit someone can actually keep. That is the whole design goal.
-
04
Incidents, the day they happen
A new IP sending as you, a record that got weakened, a legitimate sender that quietly stopped passing. Those are flagged as incidents rather than left for you to spot in a table — and they sit at the top of the digest until resolved.
-
05
Or just ask
argus0 is also an MCP server. Connect it to Claude and ask “any spoofing overnight?” or “is company.com ready for p=reject?” — answered from your own reports, with no dashboard in the way.
-
06
Tighten the policy when the numbers say so
Going to quarantine or reject too early blocks your own newsletter, CRM and invoices. The reports name every sender and say whether it aligns, so you can see for yourself when nothing legitimate is still failing — and we give you the record to publish when you decide to move.
p=none p=quarantine p=reject
Start with the minute.
Free for 3 domains and 7 days of reports. No card, and nothing you add changes how your mail is delivered.