Fixed-fee engagement
Your email is going to spam. Let's fix that.
SPF, DKIM, DMARC, and MTA-STS, audited and fixed properly, with the before-and-after score to prove it worked. One to two weeks, $1,500 fixed fee.
Why people call us
It usually starts like this.
Replies dried up and nothing else changed
Same list, same copy, same sender, and open rates fell off a cliff. Usually the mail stopped arriving rather than the message stopping working.
Your own test emails land in spam
Send yourself one from a different provider. If Gmail buries it, so is everyone else's, and no amount of subject-line testing fixes an authentication problem.
You've never seen a DMARC report
If nobody is collecting them, you have no idea who is sending mail as your domain, or which of your own tools is failing authentication right now.
You're about to start sending at volume
The worst time to discover your authentication is broken is halfway through a campaign, once the reputation damage is already done.
What you get
Everything, in one pass.
Not a report telling you what to fix. The records are written and deployed, the monitoring is running, and you get the evidence that it worked.
- Full authentication audit: SPF, DKIM, DMARC, and the alignment between them
- Records fixed and deployed, including every sending tool you actually use
- DMARC reporting turned on, with a monitored inbox and a plan to reach enforcement safely
- MTA-STS and TLS-RPT published so mail to your domain is delivered over TLS
- Diagnosis of forwarding and gateway failures, the cause of most confusing DMARC results
- Before-and-after deliverability score, plus a written record of what changed and why
We did this to ourselves first
From 1.2 to 8.4 out of 10.
Our own domain used to score 1.2 on mail-tester. Cold outreach was landing in spam, and the cause was the ordinary one: SPF that didn't cover every tool actually sending as us, DKIM signing inconsistently, and no DMARC policy or reporting at all. We rebuilt the authentication stack end to end, added MTA-STS and TLS-RPT, and monitored the reports until they were clean. The score went to 8.4 and our own sending now aligns on every message.
The useful part came next. With DMARC reporting on, the remaining failures turned out not to be ours at all: they were a client's mail forwarding and the security gateway sitting in front of it, which is the single most common source of confusing DMARC data and effectively invisible without reports. That's the class of problem this engagement is designed to surface.
Questions
Before you book.
- How long does it take?
- One to two weeks, most of which is DNS propagation and a monitoring window rather than work. The audit itself is same-day; the reason we don't finish faster is that we want a few days of real DMARC data before saying it's fixed.
- Will this get me out of spam permanently?
- Authentication is the part you control, and it's necessary rather than sufficient. If your domain is failing SPF or DMARC, nothing else you try will work. If it's already clean and you're still landing in spam, the problem is list quality, sending volume, or content: we'll tell you that instead of taking your money.
- We use several tools to send mail. Does that complicate it?
- It's the usual case and it's exactly where things break. A CRM, a marketing platform, a helpdesk, an invoicing system, and someone's personal alias all sending as your domain, with authentication set up for two of them. Enumerating the real senders is half the job.
- Can you do this if our DNS is managed by someone else?
- Yes. We can either work through your IT provider with the exact records specified, or take temporary DNS access if you'd rather we made the changes directly. Whoever holds the keys keeps them.
- What does it cost?
- $1,500 for a single sending domain, $2,500 where several domains or a mail gateway are involved. Fixed fee, quoted in writing after a short call to confirm which of those you are.
Find out where your mail is going.
Tell us your domain and we'll check the authentication before the call, so we can open with what's actually wrong rather than asking you to describe it.
Bigger automation problem? Workflow automation & integrations is where most engagements start.