Whoever monitors your email security has to be secure themselves. DomainRadar is built for this from the ground up.
Transparent service providers Who processes data on behalf of DomainRadar is set out openly on its own page; you can request a data processing agreement (DPA). View sub-processors
No third-party mailboxes: your DMARC reports go to DomainRadar’s own receiving service, not to third parties.
DomainRadar reads no email content. DMARC reports only contain sending servers, counts and check results.
Read-only: DomainRadar changes nothing in your DNS or your mailboxes.
Strict separation: every company only sees its own data – enforced in the database and tested automatically.
Clear retention: raw reports 30 days, analyses 13 months, then deleted automatically. Data export and deletion on request under the Swiss FADP.
Sign-in via Microsoft Entra ID: no extra passwords, multi-factor sign-in is handled by your own account.
Fraud protection
How to recognise genuine emails from us
Fraudsters like to pose as a well-known service. At DomainRadar, these rules apply without exception.
We never ask for passwords, codes, card or account details – neither by email nor by phone. DomainRadar has no passwords of its own: you sign in with your Microsoft account.
You always start the sign-in yourself via domainradar.ch. We never ask you to enter a code on a sign-in page or to grant an app permissions via a link in an email.
Alerts, monthly reports and invitations from DomainRadar come from an address ending in @domainradar.ch. If an IT partner offers you DomainRadar under its own name, they may also come from its address.
Links in our emails lead only to domainradar.ch and its subdomains or to your IT partner’s portal address – no link shorteners and no redirects through third-party services.
Our own domain domainradar.ch is protected with DMARC p=reject, including subdomains: mail servers that check DMARC reject emails that forge our sender. Check it yourself with the free check
Does an email in our name look suspicious? Do not click anything and forward it to this address: info@domainradar.ch
Transparency
What we check – and what we don’t
DomainRadar works only with data that is public anyway and with the aggregate reports that mail providers send for your domain.
What we check
Your domain’s public DNS records: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT and BIMI
The publicly reachable certificates of your website and mail server
Entries on public block lists (blacklists) and the domain status at the registry
DMARC aggregate reports from mail providers: sending servers, volume and check results
Your DMARC record, additionally against the new DMARCbis standard (RFC 9989)
Whether a domain sends email according to DMARC reports (counts only) and whether lookalike domains are registered
From these reports: spoofed emails rejected or quarantined and, after a DMARC policy change, rejections of your legitimate services
Orphaned records: whether CNAME, MX or NS records of known subdomains and targets in SPF, DMARC, MTA-STS and BIMI point to services or domains that no longer exist – DNS only, never a takeover attempt
For MTA-STS: whether all mail servers are listed in the policy, the certificates are valid and the domain is ready for enforce
Which mailbox providers send DMARC reports – with an alert if a large provider that used to report regularly goes silent
What we don’t do
No access to your mailboxes and no email content
No forensic per-message reports, only aggregate reports
No changes to your DNS, your servers or your accounts
No analytics services and no cookies on this website
Where your data is processed is set out in the privacy policy and on the Sub-processors page. Privacy · Sub-processors
Now 14 days free
Protect your domain
Write to us – we show you DomainRadar with example data and work out with you which plan fits.
