DMARC report analyzer.
Turn a raw DMARC aggregate (rua) report into a readable breakdown — every source sending as your domain, whether SPF and DKIM align, and what to fix. Paste the XML or upload the .xml, .gz, or .zip. It's parsed in your browser; nothing is uploaded.
Parsed entirely in your browser — the report is never uploaded or stored. Aggregate reports contain only per-source counts and SPF/DKIM results, never message contents or recipient addresses.
What the report is telling you
Each row groups mail by the server that sent it. For every source you get the message count, the SPF and DKIM alignment result, and the policy that was applied. A healthy domain shows nearly all volume passing from a handful of known senders. Anything unaligned is either a legitimate service you still need to authenticate, or someone spoofing you — and you want to know which before you tighten your policy.
From monitoring to enforcement
Most domains start at p=none — monitoring only. The reports are how you safely get to enforcement: watch them until every legitimate source aligns, then step the policy to quarantine and finally reject. Build the record with the DMARC record generator, confirm what's published with the domain health check, and if a sender is failing SPF, fix it with the SPF record generator.
DMARC report analyzer — FAQ
Authenticated — now keep the list clean
Passing DMARC gets you to the inbox; a clean list keeps you there. Verify and clean yours — start free with 100 credits, no card required.