In short
Valimail Core is Valimail's multi-tenant DMARC edition, with automated DMARC, SPF and DKIM management, role-based access and team alerting. Valimail Pro adds BIMI management, MTA-STS, continuous protection reporting, advanced alerting and API access. Both are priced per domain on the Pax8 marketplace; we supply them with monthly billing, terms confirmed at quote.
Get a quote for Valimail Core or Pro
Tell us roughly how many users or sites you have and we will come back to you with options and a quote.
What Valimail Core and Pro are
Valimail's MSP page (opens in a new tab) names two editions, "Valimail DMARC Core" and "DMARC Pro", and says Valimail "supports a multi-client resale model through per-domain pricing and availability on the Pax8 marketplace". Pax8 lists them as Valimail Core and Valimail Pro.
Valimail designs them for managed service providers looking after many client domains. The same features suit any organisation that runs DMARC for several brands, schools, sites or subsidiaries and wants each kept separate. Either way, the automation underneath is the same as Valimail's Enforce product describes: senders authorised in one click, records updated by Valimail, and Instant SPF to work around SPF's lookup limit.
Valimail Core vs Valimail Pro
Valimail's own summary: "DMARC Core provides multi-tenant management, automated authentication workflows, and role-based access ... DMARC Pro adds BIMI management, MTA-STS (opens in a new tab) encryption, continuous protection reporting, advanced alerting, and comprehensive API access" (MSP FAQ (opens in a new tab)). Feature by feature:
| Feature | Valimail Core | Valimail Pro |
|---|---|---|
| Native multi-tenancy: all customer domains in one console, with strict data separation | Included | Included |
| Role-based access control for MSP teams and customer users | Included | Included |
| Automated DMARC, SPF and DKIM management | Included | Included |
| Team-based alerting for MSP and customer teams | Included | Included |
| Low-touch onboarding, cloud-native with no hardware | Included | Included |
| BIMI management: customer logos in supported inboxes | Not included | Included |
| MTA-STS: enforce encrypted email transport | Not included | Included |
| Continuous protection reporting: DKIM key audits, unused senders and misconfigurations | Not included | Included |
| Advanced alerting and policy change detection | Not included | Included |
| Comprehensive API access for provisioning, reporting and workflows | Not included | Included |
The Pax8 listing for Core adds one-click authorisation of each domain's sending services, Instant SPF and a library of pre-identified sending services, and describes help meeting Google and Yahoo's DMARC, DKIM and SPF requirements. The Pax8 listing for Pro also lists automated DMARC policy enforcement and continuous sender discovery and authorisation.
Not sure which option fits? Ask us
Tell us what you need and we will recommend the right option for your organisation, with a quote.
What Valimail Pro's extras mean in practice
The Pro features are useful, but not every domain needs them on day one:
- BIMI lets mailbox providers consider showing your logo beside authenticated mail. The BIMI Group (opens in a new tab) says it needs DMARC at quarantine or reject and an SVG Tiny-PS logo, and Gmail and Apple also require a mark certificate (VMC or CMC). Each provider decides whether to show the logo
- MTA-STS (RFC 8461 (opens in a new tab)) protects email coming into your domains by asking sending servers to use verified TLS. gov.uk's Securing government email (opens in a new tab) guidance requires an MTA-STS policy for public sector domains that receive email, and the NCSC recommends testing mode with TLS reporting first (opens in a new tab)
- Continuous protection reporting audits DKIM keys and finds senders you no longer use, so old authorisations do not linger
- Advanced alerting and policy change detection flags configuration drift, such as a record changed outside the platform
- The API connects Valimail to your PSA, reporting or provisioning tools; Pax8's listing mentions account management, DMARC policies and reporting
Which edition fits?
A quick way to think about it. We can help you choose for your own domains:
| If you... | Edition to consider |
|---|---|
| Want DMARC, SPF and DKIM automated across your domains, with alerts and role-based access | Valimail Core |
| Manage domains for several clients or organisations and need each kept separate | Valimail Core (or Pro) |
| Want your logo to have the chance to show in supporting inboxes | Valimail Pro (BIMI) |
| Run public sector domains, or simply want encrypted inbound transport enforced | Valimail Pro (MTA-STS) |
| Need to connect DMARC to your own systems or automate onboarding | Valimail Pro (API) |
| Want regular audits of DKIM keys and unused senders | Valimail Pro |
Because Valimail prices both editions per domain, tell us how many domains each would cover and we will confirm the options at quote.
Is Valimail Core or Pro the right fit for you?
We will check it against your systems and requirements and recommend the right option.
How Core and Pro relate to Monitor, Enforce and Amplify
Valimail's public website sells Monitor, Enforce and Amplify (opens in a new tab); its MSP page and Pax8 sell Core and Pro. Valimail does not publish a one-to-one mapping between the two sets of names, so we confirm the exact feature set of your edition when we quote rather than assume, for example, that Pro's BIMI management is identical to Amplify.
Valimail Monitor stays free alongside either edition. It is a good way to see your senders before you choose, and moving from Monitor to managed records is a matter of adding the delegations described on our Valimail page.
Buying Valimail Core or Pro through us
We supply Valimail Core and Valimail Pro through the Pax8 cloud marketplace, so they can be billed monthly, per domain, with terms confirmed at quote. We can:
- Assess your domains: count them, check their current records with our DMARC checker and see which already send reports
- Choose the edition: Core or Pro, domain by domain if that suits you
- Set up the delegations: the _dmarc and _domainkey records and the Instant SPF record, with your DNS host
- Move you to enforcement: authorise your genuine senders and plan each policy change
Contact us for free advice or a quote on Valimail Core or Pro. Comparing platforms? See EasyDMARC vs Valimail and EasyDMARC pricing.
Frequently asked questions
What is Valimail Core?
Valimail Core is a multi-tenant edition of Valimail's DMARC platform, sold per domain through Pax8. Valimail says it provides multi-tenant management, automated authentication workflows and role-based access (opens in a new tab), with automated DMARC, SPF and DKIM management and team-based alerting.
Does Valimail Pro include BIMI?
Yes. Valimail's MSP page lists BIMI management (opens in a new tab) as one of the features Pro adds to Core, alongside MTA-STS, continuous protection reporting, advanced alerting and API access. You still need DMARC at enforcement and, for Gmail and Apple, a mark certificate.
Can Valimail Core and Pro be billed monthly?
Yes. We supply both through the Pax8 marketplace, priced per domain and billed monthly, with terms confirmed at quote.
Can we move from Valimail Core to Pro later?
Valimail says Pro includes everything in Core, so the features you already use carry on. How and when the change is made for your domains is confirmed at quote.
Is Valimail Core the same as Valimail Enforce?
Both automate DMARC, SPF and DKIM through delegation and Instant SPF, but Valimail does not publish a direct mapping between its public products (Monitor, Enforce and Amplify (opens in a new tab)) and its Core and Pro editions. We confirm the feature set of your edition at quote.
Still have a question about Valimail Core or Pro?
Ask us and a member of our team will get back to you.
More DMARC guides
ValimailValimail: automated DMARC monitoring and enforcement with Instant SPF.EasyDMARC vs ValimailEasyDMARC and Valimail compared side by side.
EasyDMARC pricingHow EasyDMARC plans are structured, and how to get a quote.DMARC managementManaged DMARC: hosted records, controlled policy changes and how we help.DMARC checkerLook up any domain's DMARC record, test the syntax and see what each tag means.DMARC policyDMARC policies compared: none, quarantine and reject, and when to move up.