For MSPs and agencies · Early access
Your clients' domains are stuck at p=none. Let's get them to p=reject without breaking anyone's email.
Most MSPs know they should enforce DMARC. They don't, because one forgotten sender (the copier, the CRM, the invoicing tool) gets rejected and the client calls you. ReachReject finds every sender on every client domain and moves each one to p=reject in small, reversible steps, and only when it's safe.
Get a free readiness checkOr write to aditya@reachreject.tech Open in Gmail Open in Outlook
Send us 5–10 client domains. Within 48 hours you'll get each one's DMARC, SPF and DKIM status, and exactly what's blocking p=reject. No signup, no DNS access.
What we see on most client domains
; the record that's on half your clients' domains
_dmarc.example-client.com. TXT "v=DMARC1; p=none"
That record does almost nothing. No reports go anywhere, and anyone can still send mail as the domain. Since 2024, Google, Yahoo and Microsoft have been rejecting or junking bulk mail that isn't authenticated and aligned. "We'll get to it" is getting expensive.
How it works
- Add your client domains. We read public DNS only. There's nothing to install and no access to grant.
- Point each domain's reports to us by adding our address to its DMARC record:
v=DMARC1; p=none; rua=mailto:client@reports.reachreject.tech
- We map every service that sends as that domain (Microsoft 365, Google Workspace, Mailchimp, QuickBooks, the office copier) and check SPF and DKIM alignment for each one.
- When every sender passes, we tell you the next step. You approve it and apply it.
The ladder
| Step | Record | Moves on when |
|---|---|---|
| 1 | p=none + reports | 14 days of reports collected |
| 2 | p=quarantine; pct=0; t=y | All known senders aligned |
| 3 | p=quarantine | No new failures for 14 days |
| 4 | p=reject | Done. We keep watching. |
You can roll back any step by editing one TXT record.
What you get
- One list of every client domain, with its DMARC, SPF and DKIM status.
- Readiness for each sender, so you know which service will break before you change anything.
- Alerts when a domain slips back or a new unauthenticated sender shows up.
- White-label summaries you can send to clients.
Pricing
MSP / Agency
$3 per domain / month
$49 a month minimum (covers up to 16 domains). $3 per domain up to 100, then $2.50 for domains 101–250 and $2 beyond.
Billed monthly in USD. Cancel anytime.
Single domain
$79 per year
One domain, billed yearly.
We're in early access. Version 1 covers monitoring and readiness and is read-only. Hosted DMARC management comes next. Early customers keep this price. We give guidance; you decide on and apply each DNS change, so we don't guarantee deliverability.
Questions
- Do you need access to our DNS?
- No. Version 1 reads public DNS and the DMARC aggregate reports you send us.
- Will this break client email?
- The ladder starts at
pct=0in testing mode. It moves only when every sender passes, and you approve every step. Each step is reversible. - What's in a DMARC report?
- Sending IPs, message counts and pass/fail results. Never email content.
- How do I pay?
- By card through our payment provider, which issues a proper invoice.
Who's behind this
I'm Aditya Chauhan, an independent developer in New Delhi. I built ReachReject because getting a domain to p=reject is mostly careful bookkeeping, and nobody wants to do that bookkeeping by hand for 40 client domains. Email me and you'll get a reply from me, not a sales team.
Aditya, aditya@reachreject.tech
Send us your worst five domains.
Get a free readiness checkOr write to aditya@reachreject.tech Open in Gmail Open in Outlook