You’ve probably noticed the creeping cost of email security. Every domain you add, another monthly fee. And for what? To read XML files that mailbox providers send you for free every single day.
Here’s the dirty secret the DMARC-as-a-Service industry doesn’t want you to know: DMARC aggregate reports are free XML data that Google, Microsoft, Yahoo, and every major mailbox provider email you daily. The dashboards that make them readable? They charge per domain per month—often $100, $500, or even $1,000 per domain.
I was paying for one of these platforms. Then I got curious. I looked at what I was actually paying for. It was a UI. A nice one, sure. But underneath? A simple XML parser. That’s it.
So I built my own. A self-hosted DMARC collector that parses those free XML reports, stores them, and gives you a dashboard. No per-domain fees. No vendor lock-in. Just the data you already own, made readable.
Think about it: You’re paying a monthly subscription to read data that’s already yours. That’s not a security service. That’s a tax on convenience.
And the kicker? Most of these platforms offer zero proprietary value. They’re wrappers around open-source tools like parsedmarc, with a slick UI and a pricing model that scales with your domain count. The more domains you protect, the more they charge you—for the same underlying technology.
I’m not saying all SaaS is bad. But there’s a line between value-add and rent-seeking. Charging businesses thousands of dollars annually to parse free XML files crosses that line.
Here’s what I learned: Security should be about protection, not paying tolls to read your own data. If you’re a security professional managing multiple domains, take a hard look at your DMARC costs. Ask yourself: what am I actually paying for?
The answer will surprise you. And it might just save you thousands of dollars a year.
I’ve open-sourced my solution. Not because I want to sell you something, but because I believe email security shouldn’t be a luxury good. Check it out, build your own, or at least demand better from your vendors.
FAQ
Q: Isn't there value in the convenience of a managed dashboard?
A: Sure, but convenience doesn't justify 10x markup for trivial functionality. You can deploy a self-hosted solution in under an hour with zero ongoing costs.
Q: What about support and reliability?
A: If you're managing a few domains, open-source tools are rock-solid. For enterprise, sure, pay for support—but not for a glorified XML parser.
Q: Isn't this just another developer complaining about SaaS?
A: Yes, but with a working solution. The point isn't to hate on SaaS—it's to question whether you're paying for value or for someone else's convenience.