Question for HN: how do you handle DMARC reports? We have an email where those are just pulling up in a S3 bucket. I was hoping to find an easy solution that unzips them, aggregates, visualizes, and alerts us (if necessary).
In the meantime, I'm hoping to avoid yet another subscription service. Any suggestions?
Postmark have a free service: https://dmarc.postmarkapp.com It's simple, but works well for what it is. They added a separate commercial service fairly recently.
It definitely fails the "avoid another subscription service" criteria but I've found dmarcian works pretty well for me https://dmarcian.com/ I was considering setting something up myself but it just seemed like a lot of hassle.
Try https://www.mailhardener.com which includes (amongst many other features) DMARC and SMTP TLS report aggregation.
You can use it for free for personal (non-commercial) domains. Paid tiers (starting at 19 EUR/month) also offer additional services such as MTA-STS policy hosting and BIMI asset hosting.
Common technique is to specify address for reports that bounces. Bonus points when bounce comes from the same domain and generates another report, engaging in eternal ping-pong every 24h. /s
we use
https://easydmarc.com/pricing
and fit in the free tier. I've found that not that many MTAs actually report to the DMARC URLs when they decide to discard the email so it's not as useful as it could be.
We have started using OnDMARC recently https://redsift.com/products/ondmarc which is unfortunately a subscription service, but does add value to us through their "Dynamic DMARC" and other email health goodies, not only reporting.
In the meantime, I'm hoping to avoid yet another subscription service. Any suggestions?