DMARC monitoring for the domains you manage, not just one.
You look after email security for a roster of clients, each with their own domains, their own mail vendors and their own deadlines. Blankitt DMARC gives you per-client visibility across all of them from a single login — and a self-host option for the clients whose data can't leave their walls.
Free domain check — no account required. Every feature on every plan; we gate only on domain count and retention.
The risk is now your problem to track, per client
Google and Yahoo's bulk-sender rules have been enforced since February 2024, and Gmail escalated to permanent rejection of non-compliant mail in November 2025. Microsoft began junk-routing high-volume senders from 5 May 2025 and now enforces a hard 550 rejection. Apple iCloud treats p=none as a negative signal. PCI DSS 4.0 has mandated DMARC for entities handling card data since 31 March 2025.
For an MSP, that's not one deadline — it's the same set of rules applied across every client estate you touch, each with a different mail vendor mix and a different starting point. When a client's invoices or appointment reminders start bouncing, it lands on your desk. You need to see where every domain stands without logging into a dozen separate dashboards.
One place to see every client domain
Blankitt DMARC is built around multiple domains rather than retro-fitted for them. Each domain you add gets its own aggregate (RUA) and forensic (RUF) reporting, automatic sender identification, SPF lookup tracking and a clear enforcement status — so you can answer "is this client safe yet?" at a glance and produce a per-client view when they ask.
The paid middle is sized for the way you work: Pro covers 25 domains, Business covers 100, and beyond that you add domains at £4 per domain per month. Onboarding a new client is adding a domain — not negotiating a new contract.
A guided, plain-English path to p=reject
The risk in moving a client to enforcement is breaking real mail — a forgotten CRM, a ticketing tool, a finance platform sending as the domain. Blankitt walks each domain from p=none to quarantine to reject with a policy simulator and vendor-specific fix guidance, so you can show a client exactly what enforcement would do before you change a DNS record.
That matters at scale: you can run several clients along the same enforcement path with confidence, rather than treating each one as a bespoke project, and back every recommendation with the actual reports rather than guesswork.
UK residency, an on-prem option, and one bill
DMARC forensic reports can contain personal data, which puts US-only SaaS tools in scope for US CLOUD Act exposure. Blankitt processes reports in the UK/EU on Cloudflare's network, and clients whose data genuinely can't leave their own infrastructure can run Blankitt DMARC self-hosted (£2,500 one-time licence plus £500/yr optional support, unlimited domains). That combination is hard to find: a clean multi-tenant cloud for most clients, and a self-host answer for the public-sector and regulated ones.
NCSC's Mail Check and Web Check were fully retired on 31 March 2026, and NCSC pulled DMARC aggregate reporting even earlier — so public-sector bodies and their suppliers have already lost their free government DMARC reporting. If those are your clients, Blankitt is a UK-built replacement. And because DMARC sits alongside Blankitt's IT, Finance, HR and GRC tools, you can consolidate to one login and one bill where it suits you. See the full DMARC product overview for everything that's included.
White-label & partner access — let's be straight
White-label branding is on our roadmap, not something we ship today — and we'd rather tell you that than oversell a finished programme. What works right now is solid: multi-domain management, per-domain reporting, every feature on every tier, and a self-host option. If you run an MSP or MSSP and want to shape the partner and white-label programme, we'd like to talk. Come in as a design partner.
Talk to us about partner accessWhy MSPs choose Blankitt DMARC
Multi-domain by design
Pro covers 25 domains, Business covers 100, and you add more at £4/domain/mo. Onboard a new client by adding their domain — no new contract, no sales call.
Per-client visibility
Every domain has its own aggregate and forensic reporting, sender identification and enforcement status. Pull a clear, per-client view in seconds.
Nothing to upsell
SSO, RUF, API and mailbox sync are on every tier — including Free. You never explain a feature gate to justify a capability a client actually needs.
UK residency + on-prem
Reports are processed in the UK/EU, and clients who can't let data leave their walls can self-host. Useful for public sector and regulated estates.
MSP & MSSP questions
Can I manage DMARC for many client domains in one account?
Yes. Blankitt DMARC is built around multiple domains. Pro covers 25 domains and Business covers 100, and you can add more at £4 per domain per month. Each domain gets its own reporting, sender identification and enforcement status, so you can give every client clear, individual visibility from a single login.
Do you offer a white-label or partner programme?
White-label branding is on our roadmap rather than something we ship today, so we won't pretend it's finished. What works now is multi-domain management, per-domain reporting and a self-host option. If you're an MSP or MSSP, talk to us about early access and partner pricing — we want design partners shaping the programme.
How does Blankitt help public-sector clients who lost NCSC Mail Check?
NCSC's Mail Check and Web Check were fully retired on 31 March 2026, and NCSC pulled DMARC aggregate reporting even earlier. Public-sector bodies and their suppliers have already lost their free government DMARC reporting. Blankitt is a UK-built replacement, with data processed in the UK/EU and a self-host option for clients whose data can't leave their own infrastructure.
Are any features held back on cheaper plans?
No. SSO, forensic (RUF) reports, full API access and mailbox sync are on every tier, including Free. Plans differ only on how many domains you monitor and how long we keep history. That means you never have to explain a per-feature upsell to a client to justify a capability they need.
Does Blankitt guarantee my clients' email reaches the inbox?
No tool can honestly guarantee inbox placement. What Blankitt does is monitor each client domain's authentication and guide it to safe enforcement (p=reject) without breaking legitimate mail, so mailbox providers like Google, Yahoo and Microsoft are more likely to trust it.
Start with one client domain, for free
Add a domain, see who's really sending as it, and walk it to safe enforcement. When it works, roll it out across the rest of your estate.