All questions
Q & A Email Auth · August 21, 2026

My report shows pass for everything. Am I done?

Not necessarily. All-pass reports during p=none monitoring mean your known sending sources are configured correctly — but they don’t tell you about sources you don’t know about. Check for unexpected source IPs: if you only use Google Workspace but the report shows a SendGrid IP with 200 pass messages, someone else has your domain in their SPF or is using it without authorization. Investigate every source IP, not just the failing ones.

Read the full guide
How to Read a DMARC Report (Aggregate XML Explained)
DMARC aggregate reports tell you exactly who is sending email as your domain, whether they pass authentication, and what action receivers took. Here's how to decode the XML and use it to harden your email setup.