License Status
What it is: a quick-glance view of your plan and how much of it you're using.
What you'll see: your plan name and renewal date with days remaining, a domain-usage bar (domains monitored against your plan's limit), and a full grid of every platform feature, colored to show which ones your plan includes. When you hit a limit anywhere in the app, this is the page it links you back to; a "Contact Sales" button here opens a support ticket for a capacity/plan conversation.
Org Settings
What it is: a deeper, admin-only page combining a license/usage summary with several real settings forms on one scrolling page.
What you'll see: the same plan/license summary as License Status, plus counts of how many aggregate, forensic, and TLS reports you've actually received; quick-link cards into Report Schedule, Alert Schedule, and Integrations; a Security Policy form (minimum password length, complexity requirements, and whether MFA is required org-wide, with a live strength-meter you can test a password against before saving); a Branding form (logo URL and brand color, with a live preview); and a Custom Domain section for white-labeling the app itself under your own hostname, complete with the DNS challenge record you need to publish to verify it.
Domain Management
What it is: the list of every domain you're monitoring, under Settings → Domain Management (Organization Admin only).
What you'll see: each domain with a status pill: Primary (your account's own registered domain, this one can't be removed), Active, or Pending. For a pending domain, expand Show DNS Record to get the exact Host/Type/Value challenge to publish, then click Verify. Add a new one from the Add New Domain field at the bottom.
User Management (Team)
Invite a teammate: click Invite Member, fill in Full Name, Email Address, and Role (Viewer, Organization User, or Organization Admin), then click Send Invitation. A pending invite shows a Resend Invite button until it's accepted. To edit an existing user, open the same form in edit mode; it adds a New Password field with a strength meter if you need to reset one.
What you'll see: a table of every team member (name, email, role badge, active/pending status), plus an Export button that downloads the current list as a CSV.
| Role | Access |
| Organization Admin | Full access to settings, DNS edits, integrations, and users |
| Organization User | Day-to-day access to tools and reports |
| Viewer | Read-only |
Audit Logs
What it is: a full record of every action taken in your organization: who changed what, and when.
What you'll see: a table of timestamp, action, user, and details, filterable by a date range and by user. If an action was performed by DMARCS support staff on your behalf (impersonation, used for troubleshooting), that row is clearly flagged with the supporting staff member's name, it's never hidden or shown as if it came from your own team. Each row also shows the location the action came from, resolved from the IP address.
Why use it: for compliance and incident review, and as the definitive answer to "who changed this and when."
Alerting
Click New Alert, name it, and pick a Trigger Type:
| Trigger | Needs a threshold? |
| Auth Rate Drop | Yes: 1–100% |
| Volume Spike | Yes: 1–1000% |
| Cert Expiry | Yes: 1–365 days |
| New Forwarder Detected | No |
| DNS Record Change | No |
| Blacklist Hit | No |
| DMARC Downgrade | No |
| MTA-STS Broken | No |
| SPF Lookup Limit | No |
| New Subdomain | No |
Your saved alerts are listed below the form, each showing its trigger type, threshold (if any), and when it last fired, or "Never Triggered." Edit or delete any alert from that list at any time.
Alerts notify by email only, there's no separate channel selection per alert. Use SPF Lookup Limit as your early-warning for an SPF record creeping toward the 10-lookup ceiling, rather than waiting to hit it.
Integrations
The Integrations Hub has three cards: Microsoft Teams, SSO, and API Access (a fourth, dedicated ConnectWise PSA section sits below the card grid). Each can be tested before you rely on it. SSO setup is covered in its own SSO & Identity category, and API keys in Public API.
Microsoft Teams
- Go to Integrations → Microsoft Teams → Configure.
- Paste your Teams incoming webhook URL (must be an
outlook.office.com or *.webhook.office.com URL).
- Click Save Configuration. The webhook URL is encrypted at rest.
- Click Test to send a real test notification into the channel and confirm it arrived.
- Toggle which events post to the channel: Policy Changes, New Vendors, Threat Alerts, Compliance Issues.
ConnectWise PSA
For MSPs who want a DMARCS alert to automatically open a ConnectWise service ticket in their existing tool.
- Go to Integrations → ConnectWise PSA (its own section, below the main integration cards).
- Enter Base URL (your ConnectWise API URL, e.g.
https://api-na.myconnectwise.net/v4_6_release/apis/3.0), Company ID, Public Key, and Private Key (required the first time only; leave it blank on later edits to keep the stored key).
- Optionally add Client ID, Board ID, and Company Identifier.
- Check Enabled, and check Ticket on Alert if you want every DMARCS alert to automatically open a ConnectWise ticket.
- Click Test Connection to confirm your credentials and base URL work before relying on it.
AI Copilot
There are two distinct AI surfaces in DMARCS, built for different moments:
- The floating assistant (bottom corner of every page): a free-form chat you can ask anything, explain an alert, ask what a grade means, ask what to do next. It remembers the last several turns of your conversation, so follow-up questions keep context.
- "Explain this failure": a focused, one-shot explanation launched from a specific failed report row elsewhere in the app. Rather than a conversation, it gives you a plain-language answer to exactly why that one message failed authentication, based on its actual domain, source IP, and provider.
Why use it: reach for the floating assistant for general questions; reach for "Explain this failure" when you're staring at one specific failing row and want to know why, without leaving the page.