A dmarcian alternative: Patchkit compared

dmarcian details are taken from dmarcian's own pages as published on October 10, 2026. Prices are shown exactly as listed there, with their currency and billing period, and they change often. A — means the official pages did not state it.

Who each product is for

dmarcian describes itself as a DMARC management platform with plans for individuals and small businesses, organizations and enterprises, and managed service providers. Its MSP page notes that the company was founded by the primary author of the DMARC specification, and alongside the software it sells deployment, onboarding, consultation and dedicated support services. The plan descriptions on its pricing page run from a free Personal plan for non-business domains, through Basic for a small business with a single domain, up to Plus and Enterprise for organizations with many senders, teams and domains.

Patchkit is a smaller, self-serve product. It is built for a business owner, a developer or a small IT team who wants to see every service sending as their domain, fix the records that are wrong and move to p=reject without a consulting project. There is no sales call: the plans and prices are on the pricing page and you can start on the free plan.

Price and plan limits

dmarcian publishes its prices in US dollars, with parity for Canadian dollars and euros depending on the regional instance you sign up to, and its prices exclude taxes. The free Personal plan covers up to two active domains that send fewer than 1,250 messages a month, with one month of data history. dmarcian audits Personal accounts regularly: if an account contains a domain associated with a business, the account expires and the owner can subscribe to a paid plan without losing data. Basic, the entry paid plan, covers up to two active domains, 100,000 DMARC-capable messages a month and three months of history, and every plan includes unlimited inactive domains, which suits parked and defensive registrations. dmarcian counts only legitimate traffic reported to it, so forwarded or fraudulent mail does not raise your volume. Each business plan starts with a 30-day trial and no credit card. The exact prices are in the table above, as listed on the dmarcian pricing page.

The main difference from dmarcian's model is what the free plan allows. Patchkit's free plan has no personal-use rule, so a shop or a consultancy can monitor 1 domain with 14 days of history and never be moved off it. Paid plans are priced by domain count alone, with no message allowance to outgrow: $9/mo for 3 domains, $29/mo for 15 and $79/mo for 75, and a yearly plan is charged as 10 months. Patchkit has no separate tier for parked domains; each domain you add counts toward the limit.

Free tools without an account

Both products give away their DNS tools. dmarcian's free tools page lists a Domain Checker, DMARC Inspector, DMARC Record Wizard, SPF Surveyor, DKIM Inspector and Validator, an XML-to-human converter for raw reports, BIMI tooling and an email header analyzer, all usable without registration. Patchkit has counterparts to both of those: its DMARC report analyzer reads a raw aggregate report and its email header analyzer reads pasted headers.

Patchkit's free tools are the domain health check, the DMARC checker, the SPF checker, the DKIM checker, the MX lookup, the SPF generator, the DKIM generator, the DMARC generator, the DMARC report analyzer, the email header analyzer, the BIMI checker, the MTA-STS checker, the MTA-STS generator, the TLS-RPT report analyzer, the blacklist checker and the PTR checker. All of them are one-off checks that need no account. Monitoring is narrower: the scheduled health measurement scores DMARC, SPF, DKIM and MX, and record alerts watch your DMARC and SPF records. Common findings link to a generator or a guide that explains the fix, and the setup guides cover the DNS steps for common senders and hosts.

Report monitoring and alerts

dmarcian processes aggregate (rua) reports on every plan and enriches them with its directory of email sources, so you see services by name instead of IP addresses, and TLS reporting is included on every plan too. From Basic upward it also processes forensic (ruf) reports and includes a Forensic Viewer. Its Alert Central, also from Basic, sends alerts by email, Slack, Teams or webhook when a DNS record appears or changes and when traffic volumes shift, and new trial accounts start with default SPF and DMARC alerts.

dmarcian keeps alerts off its free Personal plan; Patchkit does the opposite and puts them on every plan, Free included. They appear in the dashboard when a record is removed or changed, when SPF passes its lookup limit, when a new unknown sender shows up, when alignment drops or when reports stop arriving. Email delivery of those alerts starts at Starter, and a weekly summary email goes out on every plan. Alerts reach you only by email or in the dashboard; there is no Slack, Teams or webhook channel. On the report side Patchkit is aggregate-only, with no forensic or TLS reports, and it sorts each source into authorized, misconfigured, forwarder or unknown.

The path to p=reject

dmarcian publishes a detailed guide to advancing a DMARC policy. It recommends at least four weeks of data before acting and suggests that a compliance rate of about 98 percent per domain is usually the point to move on, one domain at a time. The guide also notes that the new DMARC RFC replaces the pct tag with a t (testing mode) tag. For organizations that want hands-on help, dmarcian sells deployment services.

Where dmarcian offers this as a guide to read and a service to buy, Patchkit turns a similar rule of thumb into a check inside the product. Each domain's path-to-p=reject roadmap looks at the last 14 days of reports and is satisfied when at least 5 reports arrived, authorized senders pass DMARC at 98% or more, and misconfigured services send at most 0.5% of your mail. Then it shows the record for the next policy step. There is no consultant behind it, and no human review of your setup.

Where dmarcian is the better fit

If your organization runs many domains, has a team that shares the work, or wants experts to run the rollout, dmarcian has features for that which Patchkit lacks:

• Forensic (ruf) report processing and a Forensic Viewer, from the Basic plan.
• BIMI Inspector and Builder on every plan, and TLS reporting for inbound mail security.
• Multiple users, user access controls, IP safelisting, single sign-on, API access and domain discovery on the higher plans.
• A dedicated MSP program with centralized multi-domain management and an MSP portal of sales and training material.
• Paid deployment, onboarding, consultation and dedicated support services from dmarcian's own team.

Patchkit's own BIMI checker and TLS-RPT report analyzer are free one-off checks; it has no BIMI builder and doesn't monitor BIMI or TLS reports.

On SPF, the two products agree more than they differ. dmarcian's SPF best practices discourage SPF flattening and recommend removing entries that are not needed, and Patchkit offers no hosted SPF either: its SPF checker counts lookups and the SPF generator builds one clean record you publish yourself.

The case for Patchkit is narrower: one person looking after a few business domains who would otherwise sit between dmarcian's Personal plan, which excludes business use, and its Basic plan. For that person a free business domain, a price that ignores mail volume and a built-in readiness check may matter more than forensic data or an MSP portal.

How to switch, or try both

dmarcian and Patchkit are set up the same way, which makes this the simplest switch of the four comparisons. According to dmarcian's getting started guide, you either put a dmarcian address in the DMARC record you publish yourself, forward reports to that address, or upload XML files. Neither service takes over the record, so it stays a TXT record in your own DNS, and the rua tag can list both addresses at once.

1. Add the domain in the Patchkit dashboard to get its report address on patchkit.email.
2. Copy the record from the setup screen. It is your current record with the Patchkit address added alongside the dmarcian one, with policy and alignment tags untouched.
3. Replace the TXT record at _dmarc with it at your DNS host.
4. Give it as long as dmarcian suggests for a first look, one to two weeks, then compare the source lists side by side.
5. To leave dmarcian, delete its address from rua; nothing else in the record has to change.

If you forward reports to dmarcian from another mailbox instead, the simplest route to Patchkit is still to add its address to rua. A ruf tag pointing at dmarcian can stay or go; Patchkit does not read forensic reports. The DMARC checker shows the published record and every report address in it.

Sources and corrections

The dmarcian column, the price notes and the setup steps above come from dmarcian's pricing page, its tools page, its Alert Central and policy guides, its SPF best practices, its MSP page and its getting started guide, all read on the date at the top. The Patchkit side describes the product as it ships today. dmarcian revises its plans from time to time; corrections are welcome at support@patchkit.app.