StonePath Cyber · Email Security
Email Authentication Hardening (SPF, DKIM, DMARC)
Stop attackers from sending email as your domain — SPF, DKIM and DMARC configured correctly and moved to enforcement.
$1,297 one-time
One-time payment · Secure checkout by Stripe · We email you after checkout to schedule your kickoff
What it is
A senior-led engagement to get your email authentication right. Your named advisor reviews your current SPF, DKIM and DMARC records, identifies every legitimate service that sends email on your behalf, corrects the configuration, and guides you from monitoring to an enforced DMARC policy without breaking legitimate mail.
What’s included
- Current-state review — SPF, DKIM and DMARC records for your domains
- Sending-source inventory — the services that legitimately send email as your domain
- Record corrections — SPF, DKIM and DMARC changes prepared for your DNS
- DMARC reporting setup — aggregate reports routed so you can see who sends as you
- Enforcement plan — a staged path from monitoring to quarantine and reject
- Close-out summary — final configuration and how to maintain it
Who it’s for
Organizations whose domains could be spoofed, who have had look-alike or spoofed phishing, or whose mail lands in spam because authentication is incomplete.
Senior-led, embedded
Every StonePath Cyber engagement is led by a named senior advisor who works alongside your team from kickoff to handoff — one accountable point of contact, plain-language findings, and recommendations sized for your organization.
How it works
Pay securely through Stripe.
Analyse your records and sending sources.
Prepare and apply record changes with your DNS owner.
Stage DMARC to enforcement and close out.
Questions
Will this affect our email delivery?
The staged approach is designed to protect legitimate mail. Policies are tightened only after reports confirm your legitimate senders are aligned.
Do you need access to our DNS?
Changes can be applied by whoever manages your DNS, using records we prepare, or with access you choose to grant.
How many domains are covered?
Your primary sending domain is included. Additional domains are agreed during scoping.
Does this stop all phishing?
No. It stops attackers from directly spoofing your domain. It does not stop look-alike domains or phishing sent from other domains.
Email Authentication Hardening (SPF, DKIM, DMARC)
Stop attackers from sending email as your domain — SPF, DKIM and DMARC configured correctly and moved to enforcement.
$1,297 one-time
Service descriptions reflect general industry practice. Nothing on this page is a compliance determination, a certification, a license, or a guarantee of any outcome. Final scope is confirmed with you in writing before work begins.
