In short
EasyDMARC and Valimail both collect DMARC reports, name your senders and host your SPF, DKIM and DMARC records. EasyDMARC flattens SPF with EasySPF and offers free tools and a 14-day trial; Valimail uses Instant SPF macros and a free Monitor product. For UK buyers, EasyDMARC offers EU (Ireland) report processing. We supply both through Pax8.
Want an impartial recommendation?
Tell us about your users, systems and priorities and we will tell you which option fits, and why.
EasyDMARC and Valimail at a glance
This Valimail vs EasyDMARC comparison draws each column from that vendor's own website and documentation:
| Feature | EasyDMARC | Valimail |
|---|---|---|
| Approach | A dashboard-led email trust platform (opens in a new tab); you publish hosted records once, then manage changes in the dashboard | Automation through DNS delegation; senders identified by name (opens in a new tab) and authorised in one click |
| Free option | Free public tools (opens in a new tab) and a 14-day trial | Valimail Monitor (opens in a new tab), free with a weekly report |
| Hosted DMARC | Managed DMARC (opens in a new tab) through one CNAME, with ramps, rollback and approvals | _dmarc delegated by NS (or CNAME) and managed in Enforce (opens in a new tab) |
| SPF over 10 lookups | EasySPF (opens in a new tab): dynamic flattening into IP ranges | Instant SPF (opens in a new tab): SPF macros return only the matching service's rule |
| DKIM (opens in a new tab) | Managed DKIM (opens in a new tab) through _domainkey NS delegation | _domainkey NS delegation (set-up (opens in a new tab)) |
| BIMI | Managed BIMI (opens in a new tab) and BIMI Reporting | Amplify (opens in a new tab); BIMI management in Valimail Pro |
| MTA-STS | Managed MTA-STS (opens in a new tab) with TLS reporting | MTA-STS in Valimail Pro (opens in a new tab) |
| Failure (RUF) reports | Full RUF detail in the reporting module (opens in a new tab) | RUF+ Failure Reports (opens in a new tab) for opted-in Enforce accounts |
| MSP features | Multi-tenant (opens in a new tab), white label, PSA and SIEM routing | Native multi-tenancy (opens in a new tab) and role-based access in Core and Pro |
| Report processing region | EU (Ireland) through its .eu reporting addresses (data hosting (opens in a new tab)) | Confirmed at quote |
| Company | EasyDMARC, with offices in the US, the Netherlands and Armenia | Valimail, a DigiCert company (opens in a new tab) since September 2025 |
| How we supply it | Through Pax8, billed monthly, terms confirmed at quote | Valimail Core and Pro through Pax8, billed monthly, terms confirmed at quote |
Still not sure which way to go? Ask us
Tell us what matters most to you and we will recommend one, with the trade-offs explained.
How each handles your DNS records
The practical difference shows up in what you publish in DNS on day one:
| Record | EasyDMARC (hosted options) | Valimail (Enforce, Core or Pro) |
|---|---|---|
| DMARC at _dmarc | A CNAME to EasyDMARC (Managed DMARC), or a TXT record you manage yourself | An NS record delegating to ns.vali.email, or a CNAME where NS is not possible |
| SPF at the domain | One EasySPF TXT record; sources managed in the dashboard | v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all |
| DKIM at _domainkey | An NS delegation for Managed DKIM | An NS delegation to Valimail |
| Reporting only | Add EasyDMARC's reporting address to rua | Add Valimail's reporting address to rua (Monitor) |
Both keep your DNS zone with you. EasyDMARC says your team retains full control of the DNS zone (opens in a new tab); Valimail notes its model suits teams happy to delegate, and that some prefer more manual control (why Valimail (opens in a new tab)). On SPF, EasyDMARC's flattening publishes IP ranges and refreshes them as providers change; Valimail's macros mean your full sender list is not exposed in public DNS (opens in a new tab).
When each tends to fit
These are considerations, not a ranking. Plenty of organisations would be well served by either:
| Consideration | EasyDMARC tends to fit when... | Valimail tends to fit when... |
|---|---|---|
| How hands-on you are | You want to see and approve each change, with ramps and rollback | You want the platform to handle record changes once senders are authorised |
| Starting point | You want to try the full platform first (14-day trial) | You want free, ongoing visibility first (Monitor) |
| SPF | You are comfortable with flattened IP ranges kept up to date | You prefer macros, with your sender list kept out of DNS |
| Data location | You want reports processed in the EU | Report location is not a deciding factor for you |
| Beyond DMARC | You also want deliverability, DNS management or lookalike domain modules | You want a focused authentication and enforcement product |
| Plans | You want to pick a plan by domains and email volume | You want simple per-domain editions (Core or Pro) |
Our DMARC management page explains how we help you weigh these up for your own domains.
Weighing up the options?
We can compare them against your own requirements and recommend what fits.
For MSPs and multi-domain organisations
Both have strong multi-tenant options:
- EasyDMARC has an MSPs & Agencies plan (opens in a new tab) (10-domain minimum, per-domain monthly pricing) with multi-tenant client management, white-label reports and alerts, optional read-only client access and routing into PSA, SIEM, Slack or Teams
- Valimail offers Core and Pro (opens in a new tab) per domain: Core with native multi-tenancy, role-based access and team-based alerting, Pro adding BIMI, MTA-STS, protection reporting, advanced alerting and API access
If white-label reporting to your own clients matters, EasyDMARC describes it explicitly. If you want automated record management across every client with minimal DNS work per sender, Valimail's delegation model is built for it. See EasyDMARC pricing and Valimail Core and Pro.
EasyDMARC alternatives, and where Check Point fits
If you are looking for an EasyDMARC alternative, Valimail is the other standalone DMARC platform we supply. The third option is Check Point's DMARC Management add-on for Check Point Email Security (opens in a new tab). It hosts a reporting mailbox for each tenant, includes SPF and DKIM Management, and gives recommendations per domain, all in the same portal as your email protection. It makes most sense if you already run, or are choosing, Check Point Email Security.
Free checks are a good place to start whichever way you lean: our DMARC checker shows each domain's current record, and the DMARC report analyser guide compares how all three platforms present reports.
Switching between EasyDMARC and Valimail
Moving from one platform to the other is mostly a DNS exercise, done domain by domain:
- Start reporting to the new platform by adding its address to your rua tag; EasyDMARC's migration guide (opens in a new tab) calls this the only DNS-level change required, and Valimail Monitor connects the same way (opens in a new tab)
- Keep both addresses in rua for a while so you can compare the views
- Replace hosted records with the new platform's equivalents: for example, swap EasyDMARC's Managed DMARC CNAME for Valimail's NS delegation, or the reverse
- Move SPF across last, once the new platform knows every legitimate sender
- Remove the old platform's records; EasyDMARC advises reverting hosted records before a subscription ends (opens in a new tab)
Your policy can stay where it is throughout, so a careful switch does not need you to step back from enforcement.
How we help you compare
Because we supply both platforms, and Check Point's add-on, we can compare them against your real domains rather than in the abstract. We can:
- Assess your domains: run each through our checker and see how many senders and lookups you have
- Trial both: use free Valimail Monitor and an EasyDMARC trial side by side on the same reports
- Recommend and supply the platform: through Pax8, billed monthly, terms confirmed at quote
- Move you to enforcement: set up the hosted records and plan each policy step
Contact us for free advice on which platform fits.
Frequently asked questions
Is EasyDMARC or Valimail better for MSPs?
Both are built for MSPs. EasyDMARC has an MSPs & Agencies plan with white-label reporting and PSA and SIEM routing; Valimail has Core and Pro editions with native multi-tenancy and role-based access, sold per domain. The better fit depends on whether you want white-label reporting and hands-on control, or automated record management. We can help you compare.
Which is easier to set up, EasyDMARC or Valimail?
Both start with one change: adding the platform's address to your rua tag. For managed records, EasyDMARC uses a CNAME for DMARC, a TXT record for EasySPF and an NS delegation for DKIM; Valimail uses NS delegations for DMARC and DKIM and its Instant SPF record (opens in a new tab). Neither touches your mail flow.
Can I switch from EasyDMARC to Valimail, or back?
Yes. Start by adding the new platform's reporting address to your rua tag, then replace each hosted record with the new platform's version, domain by domain. Your DMARC policy can stay as it is, and we can plan the move with you.
Which has a free option?
Both. Valimail offers Valimail Monitor (opens in a new tab) free, with a weekly report. EasyDMARC offers free public tools (opens in a new tab) and a 14-day trial of its platform. Full management features are paid on both; ask us for a quote.
Do both work with Microsoft 365 and Google Workspace?
Yes. EasyDMARC lists Microsoft 365 and Google Workspace among its sending platform integrations (opens in a new tab), and Valimail describes a Microsoft 365 mailbox connector (opens in a new tab) and full Google Workspace integration. See DMARC for Microsoft 365.
Still deciding?
Ask us and a member of our team will get back to you.