PCI DSS 4.0 now mandates DMARC for payment processors.Check your compliance

Email security,
beautifully enforced.

An AI agent that monitors, diagnoses, and fixes your email authentication. Automatically.

608,197 domains scanned14-day free trial on all plansSetup in under 5 minutes

Trusted by fast growing businesses

FisterraMediavisionBrown and WillsWomen's ChapterVolarify
608,197domains scanned
28+teams protected
6protocols covered

Built on open RFC standards

Dashboard Preview

See your email security at a glance

A single dashboard for every protocol. AI insights tell you exactly what to fix.

app.authexlabs.com
Live
0Healthy

Protocol Status

DMARCRFC 7489
Configured
SPFRFC 7208
Configured
DKIMRFC 6376
Configured
MTA-STSRFC 8461
Needs attention
TLS-RPTRFC 8460
Configured
BIMIRFC 9495
Not configured
AI Agent1 pending

Escalate DMARC to quarantine

acmecorp.com - 97% compliant for 21 days. Ready to move from p=none to p=quarantine (pct=10).

Domain vulnerability

Right now, anyone can send email as you

Without DMARC enforcement, attackers can impersonate your domain to send phishing emails to your customers, partners, and employees.

CEO

<ceo@yourdomain.com>

BEC Fraud

Urgent: Wire Transfer Needed

I need you to process a wire transfer of $47,500 to our new vendor immediately. This is time-sensitive.

IT Department

<it-support@yourdomain.com>

Credential Phishing

Password Reset Required - Action Needed

Your account password expires in 24 hours. Click here to reset immediately to avoid losing access.

Billing

<billing@yourdomain.com>

Invoice Scam

Invoice #INV-2847 - Payment Overdue

Please find attached the overdue invoice for $12,350. Payment is required within 48 hours to avoid service interruption.

Check if your domain is vulnerable to spoofing:

Industry Consensus

The world's top agencies agree

Email authentication isn't optional anymore. Every major authority mandates or recommends DMARC.

FBI / IC3

$2.7B+

lost to BEC attacks annually

Google

Required

DMARC for bulk senders since Feb 2024

CISA

BOD 18-01

mandates DMARC for federal agencies

INTERPOL

#1 Threat

email fraud is the top cybercrime vector

NIST

SP 800-177

recommends DMARC for all organizations

Built on open standardsRFC 7489 DMARCRFC 7208 SPFRFC 6376 DKIMRFC 8461 MTA-STSRFC 8460 TLS-RPTRFC 9495 BIMI

From vulnerable to enforced in 3 steps

No consultants. No complexity. Just a clear path to p=reject.

Step 01

Scan your domain

Enter your domain. In seconds, we scan DMARC, SPF, DKIM, MTA-STS, TLS-RPT, and BIMI. You see exactly where you stand.

Free. No signup required.

Step 02

Add one DNS record

Point a single CNAME record to Authex. We take over managing all your email authentication protocols from that moment on.

Average setup time: 4 minutes.

Step 03

Reach full enforcement

Our AI agent monitors your traffic, identifies legitimate senders, and safely advances you from p=none through quarantine to p=reject.

Average time to p=reject: 6 weeks.

Feature Set

Everything you need to secure your email

Six protocols. One platform. Zero complexity.

AI Agent

Monitors compliance, detects issues, and escalates DMARC policy when your domain is ready.

Your MTA-STS policy is missing. This means email to your domain can be downgraded to unencrypted connections.

Your DKIM selector is correctly configured with a 2048-bit key. No action needed.

One-Click DNS Setup

Add a single CNAME record. We handle the rest.

DNS Record

_dmarc.example.com CNAME

_dmarc.example.com.authexlabs.com

Smart SPF Flattening

Stay under the 10-lookup limit automatically.

8/10DNS Lookups Used
Safe2 remainingLimit

Visual DMARC Reports

See who's sending email as your domain, beautifully visualized.

Google
65%
Microsoft
42%
SendGrid
28%
Mailchimp
15%
AWS SES
8%
Other
4%

AI Enforcement

AI agent escalates your policy safely when ready.

p=none

Monitoring only

2

p=quarantine

Suspicious emails quarantined

3

p=reject

Full protection active

Compliance Monitoring

Stay compliant with every regulation.

Google sender requirements
Yahoo sender requirements
PCI DSS 4.0
BIMI brand logos

Full Protocol Coverage

DMARC, SPF, DKIM, MTA-STS, TLS-RPT, and BIMI - monitored and managed from one dashboard.

DMARCSPFDKIMMTA-STSTLS-RPTBIMI
The cost of doing nothing

$0.0B

lost to business email compromise in 2024 alone

Source: FBI IC3 Report 2024

0%

of phishing uses email as the attack vector

Verizon DBIR 2024

0.0B

phishing emails sent every day worldwide

Statista 2024

0%

of domains still lack DMARC enforcement

dmarc.org 2024

Authex vs Legacy Tools

Why teams switch to Authex

Stop wrestling with legacy tools. Start with something that actually works.

Setup time
Legacy

Days to weeks of DNS research

Authex

Under 5 minutes with guided wizard

AI assistance
Legacy

None - manual analysis only

Authex

AI agent diagnoses and auto-fixes issues

SPF management
Legacy

Manual record editing, lookup limits

Authex

Smart flattening, automatic optimization

Reporting
Legacy

Raw XML files, hard to parse

Authex

Visual dashboards with actionable insights

AI-powered enforcement
Legacy

Risky, no guidance on p=reject

Authex

AI agent safely escalates policy when ready

Cost
Legacy

$100-500/mo for basic features

Authex

Free to scan + $99/domain/mo, everything included

Regulatory Compliance Coverage

All protocols covered by Authex
Google / Yahoo 2024
PCI DSS 4.0
GDPR
HIPAA / NIST
DORA

Customer Stories

Trusted by teams who take email seriously

Real feedback from teams using Authex to protect their domains.

We had no idea our domain was being spoofed until Authex flagged it. Setup took 5 minutes and now we're fully enforced.

SM

Sarah Mitchell

Head of IT, Greenline Studios

The AI agent caught a misconfigured SPF record we'd missed for months. One click and it was fixed. Genuinely impressed.

MW

Marcus Webb

Operations Lead, Northpoint Digital

We tried doing DMARC ourselves and gave up after a week. Authex had us at p=reject in 3 weeks with zero disruption.

JT

James Thornton

Managing Director, Pemberton Wealth

Simple Pricing

Same platform. You choose who runs it.

Every plan gets every feature. The only difference is whether your team manages it or ours does.

DIY

Your team runs it

$9/ domain / mo
Start Free

Managed

We run it for you

$99/ domain / mo
Get Started

Included in both plans

DMARC, SPF, DKIM, MTA-STS, TLS-RPT & BIMI
AI agent & auto-detection
Report analytics & geo heatmaps
DNS & blacklist monitoring
Inbox placement testing
M365 & Google Workspace audit
SPF flattening & DKIM management
Domain scanner & compliance scoring
Alert rules & email notifications
Unlimited domains & team members

14-day free trial. Cancel anytime.

Frequently asked questions

Everything you need to know about Authex and email authentication.

DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that protects your domain from being used in phishing and spoofing attacks. Since February 2024, Google and Yahoo require DMARC for bulk email senders. Without it, your emails may land in spam or be rejected entirely.

With Authex, most teams reach p=reject (full enforcement) within 2-4 weeks. Our AI agent monitors your compliance, identifies legitimate senders, and escalates your policy safely when your domain is ready - without disrupting email delivery.

Not with Authex. Our AI agent monitors your compliance rate and only recommends escalation when your domain is ready. You approve each step - from p=none to p=quarantine to p=reject - with full visibility into the impact.

Authex covers the full email authentication stack: DMARC (RFC 7489), SPF (RFC 7208), DKIM (RFC 6376), MTA-STS (RFC 8461), TLS-RPT (RFC 8460), and BIMI (RFC 9495). All six protocols in one platform.

Authex is built around an AI agent that doesn't just monitor - it diagnoses issues and fixes them. Where legacy tools show you raw data and leave you to figure it out, Authex tells you exactly what's wrong and offers one-click fixes. Plus, our interface is designed for clarity, not complexity.

No. Authex is designed so anyone can secure their domain, regardless of technical background. Our AI agent explains everything in plain language, and the guided wizard handles DNS changes step by step. If you can copy-paste a DNS record, you can use Authex.

The Starter plan is free forever and includes 1 domain, basic DMARC monitoring, weekly aggregate reports, a DNS record checker, and email alerts. It's a great way to get visibility into your domain's email security without any commitment.

Yes. Every new account gets a 14-day free trial of the Professional plan. You'll have full access to the AI agent, SPF flattening, and all premium features.

Protect your domain
in under 5 minutes

Try free for 14 days. See your email security posture instantly.

608,197 domains scanned and counting.