Domain protection
Reduce direct spoofing risk by configuring SPF, DKIM and DMARC correctly and progressing enforcement safely.
Email identity protection for UK businesses
Stop criminalsimpersonatingyour business by email.
Protect your domain. Protect your reputation.
SenderShield checks your SPF, DKIM and DMARC,
identifies weaknesses and helps you fix and
continuously monitor your domain to prevent
email spoofing and impersonation.
Check your domain for free
Free No signup Results in seconds
No signup requiredCheck your domain instantly.
Results in secondsSee your security status clearly.
UK focussedBuilt for UK businesses.
46%
of UK small businesses identified a cyber breach or attack in the previous 12 months.UK Government Cyber Security Breaches Survey 2025/26. Email authentication is one layer of cyber protection. View source.
UK based
Supporting
UK businesses
Trusted by SMEs
Across multiple industries
Secure & confidential
We never store your emails
Clear, expert support
From setup to monitoring
No mailbox access — public-record scan
No passwords — nothing sensitive to enter
Staged rollout — avoid breaking genuine email
Two ways to protect — £99 one-off or £49 setup + £29.99/month managed
UK focusedBuilt for SMEs
DMARCPolicy review
SPFSender checks
DKIMVerified in setup
Plain EnglishClear reporting
Human supportNot just a dashboard
What SenderShield protects
Make it harder to pretend an email came from your business.
Email authentication gives receiving systems clearer instructions about which services are allowed to send as your domain. SenderShield helps configure that safely without pretending it prevents every type of phishing or fraud.
Microsoft 365Google WorkspaceWebsite formsCRM systemsAccounting toolsEmail marketing
Legitimate senderYour approved email platform sends a genuine message using your domain.
→
SenderShield setupSPF, DKIM and DMARC are reviewed so legitimate senders authenticate correctly.
Unauthenticated senderA message claims to use your domain but does not pass the expected authentication checks.
→
Policy responseReceiving systems can apply the action published in your DMARC policy, such as monitoring, quarantine or reject.
Three parts of healthy business email
Protection, deliverability and control.
Email authentication is not only about blocking spoofing. A well-managed setup also helps legitimate mail authenticate consistently and gives you clearer control as sending systems change.
Email health & deliverability
Help legitimate business email authenticate correctly and avoid preventable configuration problems that can contribute to delivery issues.
Governance & control
Keep track of authorised sending services, configuration changes and the evidence behind each recommended action.
Free domain check
Get a clear domain protection grade.
Enter your company domain. We’ll check public DMARC and SPF records, HTTPS certificate health and website availability, then turn the email-authentication signals into a simple A–F grade. We never ask for your email password.
Live public-record scan
Check your business domain
Use the domain after the @ in your work email, or your company website address.
The scan checks public internet records only. Lookup requests are processed by a third-party DNS/SSL checking service. Do not enter passwords or confidential information.
What the free check does — and doesn’t — mean
A result is a technical snapshot, not evidence that your business has been hacked and not a guarantee against fraud. SenderShield focuses on email-domain authentication and monitoring.
⌁
Your result will appear hereDMARC · SPF · SSL · Website status
Free detailed domain review
Want a human to look before you buy?
Send us your business domain and the email services you use. We’ll review the public authentication setup in more detail and explain what deserves attention. No 14-day monitoring trial, no mailbox password and no obligation to purchase.
What you actually receive
A clear protection report, not a wall of security jargon.
The one-off Secure service finishes with a plain-English configuration summary. Protect customers then receive ongoing visibility when senders or authentication settings change.
✓
Authorised sending sourcesSee which services are expected to send on behalf of the domain.
✓
Authentication statusSPF, DKIM and DMARC issues are explained in practical terms.
✓
Action only when neededHealthy months are reported honestly rather than filled with invented alerts.
Example protection report
yourcompany.co.uk
DMARC policyReject
Authorised senders6 active
SPF statusHealthy
DKIM alignmentPassing
Recent checks
12 SepMicrosoft 365Passing
15 SepWebsite formPassing
18 SepSPF / DNSNo change
MonthlyProtection summaryNo action needed
Example only: report contents depend on the services and records used by each business.
Simple by design
Check → secure → monitor.
Every customer starts with a careful check and staged setup. If you choose Protect, we then keep monitoring authentication and sender changes; if you choose the £99 one-off option, you can stop after the setup and handover.
01 / CHECK
Understand the current setup
We review the domain, identify the services legitimately sending email and confirm what needs attention before changing anything.
02 / SECURE
Strengthen it safely
We verify SPF and DKIM where relevant, review DMARC data and move toward stronger policy in stages so genuine email keeps working.
03 / MONITOR
Keep watch with Protect
Protect keeps checking for authentication failures, sender changes and configuration issues. One-off Secure customers receive the completed setup and handover instead.
When ongoing monitoring helps
Useful when the systems sending your email change.
Protect includes the initial setup and continued oversight — especially useful when new software, forms or mail platforms are added over time.
NEW SENDERS
Your business adds software
A CRM, newsletter platform, invoicing tool, website form or booking system can start sending mail for your domain. SenderShield helps check that it authenticates correctly.
CONFIG CHANGES
Settings can be altered later
A provider, website change or new sending service can affect authentication after the initial setup. Monitoring highlights changes that deserve review.
PLAIN ENGLISH
You see the value each month
A concise report shows authentication health, relevant failures and changes. Healthy months are reported honestly rather than inventing “threats blocked.”
Straightforward pricing
Choose one-off protection or ongoing managed monitoring.
Choose SenderShield Protect & Monitor for £49 setup + £29.99/month, including the initial setup and ongoing monitoring. Prefer no subscription? SenderShield Secure remains £99 one-off.
Most popular · Continuous protection & monitoring
SenderShield Protect & Monitor
£29.99
per domain / month · plus £49 setup
Your domain doesn’t just get protected once — it stays monitored.
- Everything needed for the initial Secure setup
- Domain and email-authentication assessment
- Review SPF, DKIM and DMARC configuration
- Safe staged move toward stronger enforcement where appropriate
- DMARC and authentication monitoring
- Alerts for new, failing or changed sending sources
- SPF / DNS configuration-change warnings
- Support when adding a new email-sending service
- Plain-English monthly protection report
£49 setup for a standard domain, then £29.99/month. Complex environments or remediation outside the standard scope are quoted before work begins.
A small-business service, not enterprise theatre
Clear scope. Careful changes. No invented fear.
SenderShield is designed around the practical problems smaller businesses actually have: not knowing every sender, worrying that a DNS change might break email, and not wanting another expensive security platform.
SAFE ROLLOUT
We identify senders first
Strict enforcement is not switched on blindly. Legitimate sending services are checked before policy is strengthened.
VISIBLE VALUE
You can see what changed
Completion and monitoring reports show the status, relevant changes and any next action in plain English.
HONEST LIMITS
No impossible promises
Email authentication reduces direct domain spoofing risk. It is not presented as a guarantee against every phishing or fraud technique.
Understand your protection
What we check. How we work. What you receive.
Explore the services, access arrangements and an illustrative report before choosing your next step.
Managed DMARC for UK Businesses →
Understand your senders before strengthening your policy.
SPF & DKIM Setup for Business Email →
Configuration based on the systems you actually use.
DMARC & Email Authentication Monitoring →
Understand new senders, authentication failures and the next action.
SenderShield Onboarding & Secure Access →
A clear scope, controlled access and a documented handover.
Sample Email Authentication Report →
Illustrative example — not a real customer, live scan or completed project.
Start with your domain
Tell us what you use. We’ll take it from there.
You can request a free detailed domain review first, choose Protect & Monitor for £49 setup + £29.99/month, or choose one-off Secure for £99. The free review is a manual assessment of the public setup and the sending services you tell us about — not a monitoring trial.
1
Send your domainNo passwords are requested through this form.
2
We confirm scopeComplex environments are identified before any extra work is agreed.
3
Secure in stagesLegitimate senders are checked before stronger enforcement.
Not ready to enquire?
Run the free public-record check first. It takes seconds and needs no login.
Questions
Clear answers, no scare tactics.
Do I have to pay every month?
No. SenderShield Secure is £99 one-off for a standard setup. If you want ongoing managed protection instead, SenderShield Protect & Monitor is £49 setup + £29.99/month.
Do you offer a free trial?
We currently offer a free instant public-record check and a free detailed domain review, rather than advertising a monitoring trial. The detailed review looks more closely at public authentication records and the sending services you tell us about; ongoing DMARC monitoring starts only if you choose Protect.
Does a warning mean my business has been hacked?
No. Public DNS settings show how your domain is configured. A missing or weak record can deserve review, but it is not evidence of compromise. A DMARC policy of p=none is a monitoring stage, not the same as having no DMARC record.
Will changing DMARC break my email?
It can if it is changed carelessly. A proper rollout identifies legitimate senders first and progresses policy in stages. SenderShield should not jump a complex domain straight to strict enforcement without checking what sends on its behalf.
Can you check DKIM automatically?
Not reliably from a domain name alone in every case because DKIM uses selectors that are not universally discoverable. We verify DKIM during onboarding when the sending systems/selectors are known.
Why monitor something that should stay the same?
The DMARC record may stay unchanged, but the systems around it do not. Businesses add CRMs, invoicing tools, newsletter services, website forms and other senders. SPF, DKIM alignment and DNS settings can also change. Monitoring is designed to catch those changes rather than charge you for repeatedly checking an unchanged line of DNS.
Will SenderShield guarantee my emails land in the inbox?
No. Correct authentication can reduce avoidable delivery problems, but inbox placement also depends on sender reputation, complaints, content and the receiving provider. SenderShield does not promise inbox placement.
Does SenderShield prevent all email or invoice fraud?
No. Email authentication helps reduce direct spoofing of your domain, but it cannot prevent every form of phishing, mailbox compromise or lookalike-domain fraud. SenderShield is one layer of protection, not a guarantee against financial loss.