Services › Agdiwo Domain Protection
Agdiwo Domain Protection
Agdiwo Domain Protection is our secure email service, where we implement and manage SPF, DKIM and DMARC for your domain. It suits any organisation that wants to stop others from sending email in its name and make sure its own email reaches the inbox. Implementation normally takes 3–6 months, after which we monitor your domain every month.
How it works
Analysis
Every system that sends email in your name
Implementation
none → quarantine → reject
Monitoring
Monthly DMARC report
Adjustment
Key rotation and quarterly review
Steps 1–2 · Rollout 3–6 months
Steps 3–4 · Ongoing service
Process
How does the rollout work?
We roll out the protection in four steps and tighten it gradually, so that no legitimate email is stopped along the way.
Step 1
Analysis
We map your email environment and every system that sends email in your name.
Step 2
Implementation
SPF, DKIM and DMARC in place. Then we tighten the policy step by step.
Step 3
Monitoring
Monthly DMARC analysis and report with recommendations.
Step 4
Adjustment
New senders are added, keys are rotated twice a year and we hold a review every quarter.
Steps 1–2: Rollout, one-off project, around 3–6 months
Steps 3–4: Ongoing service
Scope
What is included – and what is not?
Included
✓ DMARC analysis and reporting
✓ Connection to your email environment
✓ Configuration of your email platform
✓ Management of DNS records together with your domain registrar
Not included
– Monitoring of lookalike domains
– Filtering of incoming email
– Employee training
– Configuration of third-party providers' systems
Agdiwo Domain Protection is a standalone service that you can buy separately. For customers with Agdiwo Operations it is also available as an add-on.
What is DMARC?
DMARC is a standard that tells receiving email servers how to handle email that claims to come from your domain but does not. It builds on SPF and DKIM.
What is the difference between SPF, DKIM and DMARC?
SPF specifies which servers may send email for your domain. DKIM signs the email so that it cannot be altered in transit. DMARC ties them together and decides what happens to email that fails the check.
How long does the rollout take?
Normally 3–6 months. After that, the service continues with ongoing monitoring and adjustment.
Why is the policy tightened gradually?
If you go straight to reject, legitimate email from forgotten systems risks being blocked. We move from none via quarantine to reject once all senders have been mapped.
Does the service protect against phishing in incoming email?
No. Agdiwo Domain Protection stops others from sending email in your name. Filtering of incoming email is not included.
Want to know more?
We start with an analysis of which systems send email in your name.
