Services
Three engagements
Fixed price, agreed before I start.
No hourly billing. No scope that quietly expands. If the work turns out harder than I estimated, that's my problem — not your invoice.
01 · Diagnosis
€300
Audit · 3 business days
02 · Treatment
from €900
Fix · 1–3 weeks
03 · Maintenance
€150/month
Monitoring · cancel anytime
01 · DIAGNOSIS
€300
fixed · 3 business days
Deliverability Audit
Something is wrong — mail is landing in spam, a customer said they never got your invoice, or a checker showed red — and you want to know what's actually broken before you spend money fixing the wrong thing.
- Every authentication record checked and explained: SPF, DKIM, DMARC, MX — plus MTA-STS, TLS-RPT and DNSSEC where they apply
- Your SPF DNS lookups counted, with the exact include chain that's overflowing the limit
- Your DMARC aggregate reports parsed, if you have any
- A map of every system currently sending mail as you. Most companies find at least one they'd forgotten about.
- A written report listing the required changes, in the order they must be made
What it isn't. I don't touch your DNS. This is diagnosis, not treatment. The report is yours — hand it to your IT provider, your agency, or keep it. There's no obligation to have me do the work.
The report is the deliverable. You can act on it without me.
If you book a Fix within 30 days, the €300 comes off the price.
02 · TREATMENT
from €900
1–3 weeks
Deliverability Fix
You know mail is failing and you want it working, verified, and documented — not "probably fine now."
- The audit, if you haven't already bought one
- SPF consolidated to a single valid record, under the ten-lookup limit, with every legitimate sender still authorised
- DKIM signing enabled on every system that sends mail as you, with 2048-bit keys
- DMARC staged from p=none → p=quarantine → p=reject, with reports read between each stage so nothing legitimate is dropped
- Before-and-after evidence: mail-tester score, authentication results, raw headers
Duration: 1–3 weeks. Most of that is waiting, not working. DMARC enforcement requires observing reports between stages. Skipping the observation is how companies silently stop delivering their own invoices.
What it isn't. I don't write your email content, manage campaigns, or warm up IP addresses for cold outreach.
Why "from". The only variable is how many systems send mail on your behalf. Three is simple. Eleven is not. The number is agreed in writing, before anything starts — and it doesn't move afterwards.
03 · MAINTENANCE
€150/month
cancel anytime · no minimum term
Ongoing Monitoring
You've reached DMARC enforcement and you want to stay there.
- DMARC aggregate reports ingested and read — they arrive as XML that nobody opens
- A monthly summary in plain language: what sent mail as you, what passed, what didn't
- An alert when a new system starts sending as your domain. A new CRM, a new invoicing tool, someone in marketing signing up for a platform. This is how enforcement quietly breaks.
- A quarterly review of your records against current provider guidance, which changes
What it isn't. This is not 24/7 on-call. It's a monthly read of your reports by someone who knows what they say.
How pricing works
Fixed price, not hourly.
I quote a number before I start, and that's the number. You shouldn't pay more because I'm slower.
If your setup turns out to be more complex than your message suggested, I'll say so before we begin — not after.
Invoiced directly. Payment terms agreed up front.
Not a fit if…
- You want help getting cold outreach into the inbox. Authentication is not why cold email fails, and I won't pretend it is.
- You want someone to manage your marketing campaigns or write your emails.
- You want it done today. DMARC enforcement takes observation time. Rushing it is how legitimate mail gets dropped.
- You want hourly billing.
- You need someone on site.
Questions
- Can you work with our existing IT provider?
- Yes, and it's usually faster. I supply the exact records; they publish them. Most IT providers are happy to have someone else own the DMARC problem.
- Do you need access to our DNS?
- I'd rather you make the changes yourself. I give you the exact records, in order, with what to check after each one. If you'd prefer I do it, read-only or delegated access works too.
- We don't know which systems send mail as us. Is that a problem?
- No — that's the audit. Almost nobody knows. It's the first thing we find out.
- Will this stop our email going to spam?
- Not on its own, and anyone who promises otherwise is selling you something. Authentication is necessary, not sufficient. If your domain is authenticated and your mail still lands in spam, the cause is content, list quality, sending volume, or reputation — and I'll tell you that plainly rather than take your money for the wrong fix.
- What happens after I send my domain?
- I run the check, read what it returns, and send you a written assessment of what's wrong and whether you need me. If you don't, I'll say so.
Start with the check
It's free, it takes four seconds, and it tells you whether any of this applies to you.