DMARCDECK monitors who sends email in your name, flags spoofing the moment it appears, and walks your domain safely to full DMARC enforcement — with reports a human can actually read.
Start free 30-day trial · Check your domain free ↓The live dashboard every domain gets — updated with every aggregate report. (sample data)
Instant SPF / DKIM / DMARC audit — including the SPF 10-lookup limit most tools miss.
Every source IP is identified, geolocated, and classified: Authorized, Forwarder, Third-party (a vendor sending as you under its own identity), or Threat — each with a plain-language diagnosis of what the mail proved and what to fix. You see spoofing as it happens — not in a raw XML file.
A live readiness score, the exact DNS record for your next policy step, and a projected date you can safely reach p=reject.
A weekly plain-language email, a one-click executive PDF report for management, CSV export for your IT team — and a live protection badge for your website.
The moment a new unauthenticated sender appears using your domain, you get an email — with IP, country, and network owner.
DMARCDECK is a DMARC monitoring and enforcement service operated from Beirut, Lebanon by LBCLOUDS, LLC — one of the very few DMARC providers with a team in the region. Support in your timezone, in Arabic, French or English, with pricing and payment methods (card, bank transfer, OMT) that actually work for Lebanese and Middle Eastern businesses. The product itself is a normal SaaS platform used by businesses worldwide.
The big mailbox providers now require it. Since February 2024, Google and Yahoo require a DMARC record from any domain sending 5,000 or more messages a day, and SPF or DKIM from every sender. Microsoft applied the same rules to Outlook.com, Hotmail and Live in 2025. A Lebanese company without these records sees invoices, newsletters and password resets land in spam or get rejected.
Invoice fraud and CEO impersonation depend on spoofing. Banks and companies across Lebanon and the Gulf see the same pattern: a supplier's unprotected domain is spoofed, a payment is redirected to a new IBAN, and the money is gone before anyone calls to confirm. An enforced DMARC policy makes the receiving server refuse those forgeries before a human ever sees them.
Partners and procurement are starting to check. Lebanese public bodies have issued tenders for DMARC and BIMI protection licences, and regional banks increasingly verify a supplier's email authentication before onboarding.
p=none for years.rua mailbox nobody opens, full of gzip XML.None of these need a new mail system. They are DNS fixes, done in the right
order, with reports that tell you whether each one worked. DMARC lives in DNS, so a
.lb or .com.lb domain is treated exactly like a
.com — whether your zone is at the registry, a local host, Cloudflare
or your ISP. Read more about our security work at
lbclouds.com.
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS record that tells receiving mail servers what to do with email that claims to come from your domain but fails SPF and DKIM checks: deliver it anyway (p=none), send it to spam (p=quarantine) or refuse it (p=reject). It also makes those servers send you reports about every server using your name.
There is no Lebanese law mandating DMARC, but the requirement arrives through the mailbox providers your customers use. Since February 2024, Google and Yahoo require a DMARC record from any domain sending 5,000 or more messages a day and SPF or DKIM from everyone, and Microsoft applied the same rules to Outlook.com in 2025. Lebanese public bodies have also started issuing tenders for DMARC and BIMI protection licences, and banks increasingly check suppliers’ email authentication before onboarding them.
Yes. DMARC is a plain DNS TXT record at _dmarc.yourdomain, so it works identically for .lb, .com.lb, .com, .net or any other extension. The only requirement is that you, or your registrar or hosting company, can edit the DNS zone of the domain.
DMARCDECK starts at $9 per month per domain after a free 30-day trial with no card required. A fully managed enforcement program, where we run the whole 8 to 12 week journey to p=reject for your domain, is a one-time $199. We accept card, bank transfer and OMT.
Not if enforcement is done in stages. You start at p=none, which changes nothing, and use the reports to find every legitimate sender: your mail server, Microsoft 365 or Google Workspace, the accounting system, the newsletter tool. Once each one passes SPF or DKIM you move to quarantine and then reject. DMARCDECK scores your readiness at each step and gives you the exact DNS record to publish.
Support in your timezone and in Arabic, French or English, pricing set for regional businesses rather than enterprise contracts, payment methods that work from Lebanon, and a team that understands the local mail hosting and registrar landscape. The product itself is a normal SaaS platform used by businesses worldwide.
Message volumes are counted from your DMARC aggregate reports. Annual billing −20%. Bank transfer, card, or OMT accepted.
DMARCDECK is built and operated by LBCLOUDS, LLC · info@lbclouds.com
DMARC providers compared · DMARC in Lebanon · How it works