Email Security (DMARC+)

Dashboard

Dashboard

Overview

The DMARC+ Dashboard is your starting point for understanding your email authentication posture. It aggregates data from DMARC reports across all your domains into a single view, making it easy to spot problems and track improvement over time.


Dashboard filters

At the top of the dashboard you can filter all data by:

  • Domain — view one domain or all domains at once
  • Policy — filter by current DMARC policy (none, quarantine, reject)
  • Country — see where email is being sent from
  • Time period — zoom in on specific date ranges

Use filters to isolate issues. If you're seeing authentication failures, filter by domain and look for unusual sending countries or sources.


Key metrics

DMARC+ Overview cards

Three summary cards show the authentication health of your domains:

Card What it shows
Valid SPF records Number of domains with a correctly configured SPF record
Valid DKIM records Number of domains with DKIM signing in place
Valid DMARC records Number of domains with an active DMARC policy

Green = configured and passing. Any red or missing cards need attention.


Mail Distribution chart

Shows the breakdown of email volume across your domains by authentication result:

  • Pass — email passed both SPF/DKIM and DMARC alignment
  • Fail — email failed authentication (potential spoofing or misconfiguration)
  • Quarantine — email sent to spam per your DMARC policy
  • Reject — email blocked per your DMARC policy

A healthy domain at enforcement should show near-100% pass rate.


Authentication rate trend

A time-series chart showing your SPF pass rate, DKIM pass rate, and overall DMARC pass rate over the selected period.

What to look for:

  • A rising trend = good, your configuration is improving
  • A sudden drop = something changed — a new sending service added without SPF/DKIM setup, or a DNS change that broke existing records
  • Persistent failures in a specific IP range = unauthorised sending source

Top sending sources

A ranked list of IP addresses or sending services sending email from your domain, with their authentication pass/fail breakdown.

Use this to:

  • Identify legitimate services you haven't configured SPF/DKIM for (e.g., a marketing tool, CRM, or helpdesk)
  • Spot unknown or suspicious senders — anyone not on your approved list sending from your domain is a red flag
  • Prioritise which sources to fix first (highest volume failures first)

Geographic distribution

A map or table showing which countries email is being sent from.

What to look for: Email from countries you don't operate in — especially if those IPs are failing authentication. This is a strong signal of spoofing.


Reading your dashboard at a glance

Ask these three questions:

  1. Are my authentication rates above 95%? — If not, you can't safely move to p=reject yet
  2. Are there unknown sending sources? — Any IP failing authentication that you don't recognise should be investigated
  3. Is my trend improving? — Each week should show higher pass rates as you fix sending sources

Acting on dashboard data

What you see What to do
Low SPF pass rate Check the SPF Explorer — find failing sources and add them to your SPF record
Low DKIM pass rate Set up DKIM signing for the failing sending service
Unknown sending source Investigate the IP — is it a service you've onboarded? If not, is someone spoofing your domain?
High fail rate from one country Block or investigate — may indicate a spam campaign using your domain
Auth rate > 95% consistently Ready to advance your DMARC policy to the next stage