Guardian AI

Your DMARC Reports,
Explained in Plain English

Guardian AI reads every DMARC report the moment it arrives, identifies what's failing and why, and tells you exactly what to fix — in language anyone on your team can act on.

New sender detected

Salesforce CRM · Not in SPF record · 847 failures today

Spoofing attempt blocked

91.198.174.0/24 · 312 emails · p=reject policy enforced

DKIM misalignment

Mailchimp · Selector not published · 44 failures

<30s

to get a plain-English breakdown of any DMARC report

94%

of DMARC issues identified before they affect deliverability

10×

faster than reading raw XML aggregate reports

24/7

monitoring with proactive AI-generated alerts

Ask Guardian AI anything about your domain

It has full context of your sending sources, report history, and authentication configuration. You just ask the question.

Guardian AI

yourcompany.com · report received 4 min ago

Active
Why are some of our emails failing DMARC this week?
I can see 3 sources of DMARC failures in your reports this week:

1. Salesforce CRM — 847 emails failed SPF alignment. Your SPF record doesn't include Salesforce's sending IP range.

2. Unknown IP 91.198.174.0/24 — 312 emails were sent claiming to be from your domain. These appear to be spoofing attempts.

3. Mailchimp — 44 failures because DKIM is not enabled on your connected domain.

Want me to walk you through fixing each one?
Yes, fix the Salesforce one first.
Add `include:_spf.salesforce.com` to your SPF record.

Your current record:
v=spf1 include:_spf.google.com include:sendgrid.net ~all

Updated record:
v=spf1 include:_spf.google.com include:sendgrid.net include:_spf.salesforce.com ~all

Publish this as a TXT record on your root domain. Propagation can take up to 48 hours — I'll alert you once the failures stop.
Ask a question about your DMARC data…

Create an account to use Guardian AI on your domain

What Guardian AI does

More than a chatbot. A proactive intelligence layer running across your entire DMARC workflow.

Natural Language Queries

Type a question in plain English and get an instant, accurate answer. "Why are emails from our CRM failing?" "Which senders aren't DKIM-aligned?" Guardian AI knows your data and answers immediately.

Show me all senders that failed DMARC alignment in the last 7 days and explain why.

Report Summaries

DMARC aggregate reports are dense XML files full of IP addresses and policy codes. Guardian AI reads every report as it arrives and produces a human-readable summary — no technical knowledge required.

You received 12,430 emails on your domain yesterday. 94% passed. 412 failed — here's why.

Proactive Threat Alerts

Guardian AI monitors your reports in real time and alerts you the moment something changes — a new sender appears, failures spike, or a source that was passing starts failing.

Unknown IP 185.220.101.45 sent 340 emails claiming to be from your domain. Not in your SPF record.

Exact Fix Instructions

Every issue comes with a precise, actionable fix. Not a vague recommendation — actual DNS records to add, settings to change, tailored to your specific configuration.

Add include:_spf.salesforce.com to your SPF record. Here is the full updated record.

Health Score Tracking

Guardian AI tracks your DMARC pass rate over time and shows you the impact of every change you make. Know exactly whether you're improving — and how fast.

Your DMARC pass rate has improved from 71% to 94% over the last 30 days. Here's what changed.

Sender Source Identification

Guardian AI automatically maps every service sending email from your domain — Google Workspace, SendGrid, your CRM — and tells you which ones are fully authenticated.

8 sending sources detected. 6 are fully aligned. Mailchimp and your CRM need DKIM configured.

How it works

Behind the simple interface, a lot is happening automatically.

01

Connect your domain

Add your Dmarclytics reporting address to your DMARC DNS record. Reports from mail providers worldwide start arriving immediately — no other configuration required.

02

Guardian AI reads every report

As aggregate reports arrive from Google, Microsoft, Yahoo, and hundreds of other receivers, Guardian AI parses the XML, identifies every sending source, and maps pass/fail results.

03

Issues are automatically surfaced

Guardian AI correlates data across all reports, identifies patterns, and flags failures — whether it's a misconfigured sending service, a new spoofing attempt, or an alignment problem.

04

Ask questions or read your daily summary

Chat with Guardian AI to investigate specific issues, or read your automated daily brief — a plain-English summary of everything that happened on your domain in the last 24 hours.

Common questions

Do I need to know anything about DMARC to use Guardian AI?

Not at all. You can ask questions in plain English and Guardian AI handles all the technical interpretation. Most users get meaningful insights within minutes of connecting their domain.

How does Guardian AI identify my sending services?

It analyses the IP addresses and signing domains in your DMARC aggregate reports and cross-references them against a database of known email service providers — automatically identifying Google Workspace, SendGrid, Mailchimp, Salesforce, and hundreds of others.

How is this different from reading the reports myself?

DMARC aggregate reports are XML files containing raw IP addresses and policy codes — designed for machines, not people. Guardian AI parses all of that, correlates it with threat intelligence, and presents a clear summary with an action list. What takes hours manually takes seconds.

Will Guardian AI make DNS changes on my behalf?

No. Guardian AI tells you exactly what to change and provides the precise records to add, but all DNS changes are made by you. This gives you full control and a clear audit trail.

Which plans include Guardian AI?

Guardian AI is available on Professional and Agency plans. The Starter plan includes a limited weekly AI summary. See the pricing page for a full breakdown.

Guardian AI

Stop guessing.
Start knowing.

Connect your domain in 2 minutes and let Guardian AI tell you exactly what's happening with your email authentication — right now.

No credit card required. Free plan available.