DMARC Dojo vs Valimail

At a glance

Facts about Valimail come from its public pricing, product, help and trust pages as of September 2026 (see sources below).

Where Valimail is stronger

• Scale and track record. Valimail has focused on automated DMARC since 2015, and DigiCert said more than 92,000 organizations used it when it announced the acquisition in September 2025. DMARC Dojo launched in 2026.
• Government and compliance. Valimail’s trust center lists SOC 2 Type II, SOC 3 and FedRAMP LI-SaaS, and the Enterprise plan has a FedRAMP option. DMARC Dojo has no certifications, so it won’t pass many enterprise or public sector security reviews.
• SPF without the lookup ceiling. Instant SPF uses SPF macros so receivers get only the answer for the sending service in front of them. You can authorize more services than a normal SPF record allows. DMARC Dojo keeps you under the 10-lookup limit instead of removing it.
• Sender identification. Valimail says it recognizes thousands of sending services and lets you authorize preconfigured ones in a click.
• Microsoft ecosystem. Valimail offers a Microsoft Sentinel connector, a Microsoft 365 mailbox connector, domain discovery through your Azure tenant and purchase through Azure Marketplace.
• Enterprise features and service. Paid plans include unlimited users, onboarding and a dedicated account manager; Enterprise adds SAML SSO. DMARC Dojo has no SSO and no phone support.
• BIMI. Valimail’s Amplify add-on helps you publish a BIMI logo and works with every plan. DMARC Dojo only detects BIMI records; it doesn’t host them.

Where DMARC Dojo is stronger

• Published, flat pricing. Every DMARC Dojo price is on the pricing page and depends only on domain count. There are no email-volume or per-message limits, and you don’t need a sales call to find out what it costs.
• Hosted records on the free plan. Valimail’s free Monitor focuses on visibility, with limited DMARC automation, SPF capped at 10 lookups and no automated DKIM. DMARC Dojo’s Free plan hosts DMARC, SPF and DKIM for one domain, so you can change policy from the dashboard from day one.
• One-click setup with import. Connect Cloudflare or Amazon Route 53 and DMARC Dojo imports your current DMARC policy, SPF senders and DKIM keys before it changes anything.
• AI analyst and MCP. On Pro and Teams, the AI analyst explains failures, classifies senders and proposes a staged path to p=reject. The MCP server lets Claude and other MCP clients work with your domains.
• Built for small teams and agencies. Belts (White, Orange, Black) and daily digests show what to do next. Teams adds roles, invites, client sub-accounts and branded read-only client portals for $99 a month.
• Standard records. DMARC Dojo’s SPF record is an ordinary redirect= or include:, so any SPF checker can list every sender it authorizes.

Pricing compared

Valimail doesn’t publish prices for its Enforce plans, so there is no fair dollar comparison to make. The table shows DMARC Dojo’s list prices with annual billing as of September 2026 next to what Valimail publishes.

If you’re evaluating both, ask Valimail for a quote on your real domain count and compare it with the numbers above, along with the features you’d actually use. For many small teams the deciding factor is whether they need FedRAMP, SSO or unlimited SPF senders.

Switching from Valimail

Valimail usually controls your records through delegation, so switching takes a little more care than changing a report address. Plan a clean cutover per domain.

1. Write down your senders. Export or note the sending services authorized in Valimail. With Instant SPF your public SPF record is a macro include, so DMARC Dojo’s import may not find every sender from DNS alone. Your DMARC reports and Valimail’s dashboard are the reliable lists.
2. Add the domain to DMARC Dojo and enter those senders, keeping the policy Valimail currently publishes (check it with the free checker).
3. Replace the DMARC delegation. If _dmarc is an NS record pointing at Valimail, delete it before adding DMARC Dojo’s CNAME: a name can’t hold both.

   _dmarc.example.com.  CNAME  <target shown in your DMARC Dojo dashboard>

   Copy

   To keep Valimail receiving reports during the overlap, add its report address (if your account shows one) under “Also send reports to” in DMARC Dojo. A DMARC record can list several rua addresses.
4. Replace SPF and check DKIM. Swap the Valimail SPF include for DMARC Dojo’s record. Before removing any DKIM CNAMEs that point at Valimail, confirm with each sending service where its key lives, and set up DMARC Dojo’s selectors first.
5. Watch a week of reports before cancelling, and make sure every sender still passes.

On Cloudflare or Route 53, one-click setup handles the DNS changes and shows you every record it will change first.

Which should you choose?

• Choose Valimail if you need FedRAMP, SOC 2 reports, SSO, Microsoft Sentinel integration, BIMI help, or more SPF senders than 10 lookups allow. It’s also a strong fit if you want a vendor with a large installed base and a dedicated account manager.
• Choose DMARC Dojo if you want to see the price up front, host your records on a free or low-cost plan, use an AI analyst or MCP, or run DMARC for clients through branded portals on a published plan.
• Just want free visibility? Valimail Monitor and DMARC Dojo Free both work. See free DMARC monitoring options for how they and others compare.

Whatever you choose, you’ll need to meet the Gmail, Yahoo and Microsoft sender requirements and work toward p=reject.