OnDMARC Dynamic SPF

Solve the 10 DNS lookup problem

An innovative solution that delivers simplified SPF management for flawless DMARC validation.

multiple mail servers 10+ SPF lookup limit

How common is the SPF problem?

Most organizations use a number of different mail service providers - G Suite for business email, MailChimp for marketing emails, Salesforce for customer emails - and each one needs to be added to the organization’s DNS in order to authenticate the emails as genuine using SPF. However, this can quickly breach the 10 DNS lookup limit imposed by SPF.

OnDMARC Dynamic SPF

How does Dynamic SPF work?

Dynamic SPF overcomes the 10 lookup limit by enabling you to use a single dynamic include statement to combine all authorized services correctly at the point of query. This prevents your authorized traffic from failing SPF validation, regardless of how many sending services you use.

background

Why a dynamic SPF solution is the answer

The majority of legacy email infrastructures do not support SPF macros, causing catastrophic deliverability issues. So, Dynamic SPF was developed as a future-proof solution.

legacy systems accepted

Robust and failsafe

Does not rely on a macro-based approach that many other vendors use, meaning that all legacy email structures, gateways, and receivers support it. Where others claim reliability, we guarantee it.

Automated updates

No need for human intervention

A dynamic include statement monitors and updates IPs continuously. We dynamically flatten and compact SPF because it is simpler, virtually unlimited, and works with all devices.

Email delivered

Ensure 100% email deliverability

Monitors and heals syntax errors using ‘last known good’ values. If errors are encountered, they are skipped and emails continue to flow. When errors are fixed, Dynamic SPF automatically incorporates the updated values.

Testimonials

Alvarez and Marsal logo

Red Sift’s managed SPF solution doesn’t require the use of macros making it fully compatible with global email systems, whilst removing the known SPF entry restrictions.

Yousef Oujdi Alvarez and Marsal
Youssef OujdiChief Security OfficerAlvarez & Marsal

Benefits

It's clicks, not code

It's clicks, not code

Dynamic SPF removes the need for you to have the technical knowledge required to write complex SPF records and manually edit your DNS. Simply configure your required services from within the OnDMARC app.

Avoid configuration errors

Avoid configuration errors

The clue is in the name, Dynamic SPF automatically ensures every record for all 3rd party services is up to date at point of query, there’s no static code to become outdated or obsolete. Dynamic SPF works with any existing mail service or ISP.

Solve the 10 lookup limit for good

Solve the 10 lookup limit for good

Our single dynamic include statement combines all authorized services correctly at the point of query and prevents your authorized traffic from failing SPF validation, regardless of how many sending services you use.

From SMB to enterprise

From SMB to enterprise

Every day, Dynamic SPF effortlessly authenticates millions of emails for huge global organizations. It does not rely on a macro-based approach that many other vendors use, meaning that all legacy email structures, gateways, and receivers support it.

Our certifications

Microsoft Intelligent Security Association
ISO 27001
Global Cyber Alliance
Crown Commercial Service Supplier
UK Cloud Awards 2019 Winner
Cyber Exchange Member
LinkedInInstagramTwitter