MarcanSelf-hosted DMARC report processing

Ingests DMARC aggregate reports from an IMAP mailbox, checks your domains' live SPF, DKIM and DMARC records, and shows the results in a web dashboard.

Get started

GitHub

Single binary

API, embedded dashboard and IMAP ingestion worker in one executable, storing everything in SQLite. No external database or Node runtime.

Independent alignment checks

Recomputes SPF and DKIM alignment (RFC 7489) with the Public Suffix List instead of trusting each reporter's verdict.

Live DNS checks

SPF include trees and lookup limits, DMARC policy and report authorization, DKIM keys, MTA-STS, TLS-RPT and BIMI, graded by a DNS score.

Forwarding-aware failures

Splits DMARC failures into blocked by policy, forwarded and real delivered failures, so mailing lists are not mistaken for spoofing.

Attention list

One row per domain with every open issue, ranked by severity rather than mail volume, so low-volume domains are not hidden.

Sender identity from evidence

Names senders from forward-confirmed reverse DNS and passing SPF, not from a list of provider IP ranges.