Valimail review

Valimail is DMARC software for monitoring email authentication and moving domains toward enforcement. Its free Monitor tier gives teams visibility into sending domains and their DMARC enforcement status. Valimail says it turns raw IP data into DMARC reports and helps identify phishing and spoofing threats.

The paid Enforce plans are for teams that want to authenticate legitimate senders and automate SPF and DKIM work. Valimail also offers Instant SPF to address SPF’s lookup limit, while Amplify covers BIMI management and certificate deployment. These are separate products and tiers, not all included in the free Monitor plan.

The pricing notes list Monitor at $0 per month, with up to five users, up to 10 SPF lookups and limited automated DMARC. Enforce Starter, Enforce Premium, Enforce Enterprise and Amplify have custom pricing; the published pricing information does not publish their prices. That makes Monitor a low-risk starting point, but not a clear guide to the cost of full enforcement.

Valimail’s clearest advantage is a free way to start monitoring DMARC without a published subscription charge. Monitor is listed at $0 monthly and annually, and includes unlimited domain visibility. That can help a team see sending domains and enforcement status before deciding whether it needs paid automation. Note the separate cap: the plan lists up to 10 SPF lookups.

For teams that need more than reporting, the paid tiers cover a broader operational job. Enforce Starter includes unlimited users and SPF lookups; Premium adds subdomain management, subdomain reporting and forced MFA. Enterprise lists API access, SAML/SSO and JIT provisioning, configurable alerts and portfolios, plus a FedRAMP option. Amplify is aimed at BIMI and VMC/CMC deployment.

There is some positive user feedback, though it is not unanimous. One r/msp commenter said Valimail’s paid reporting tools were good and praised its professional services team as responsive and knowledgeable. A commenter in the same discussion said Enforce includes professional services to work toward DMARC reject on managed domains. Those accounts suggest the paid offer may suit teams that want help with implementation, not just a dashboard. We would still get the scope and support terms in writing before comparing quotes.

The main drawback is price opacity. The pricing information lists no monthly or annual price for Enforce Starter, Premium, Enterprise or Amplify. It also leaves domain and email-volume limits unpublished for Starter, seat, domain and email-volume limits unpublished for Premium and Enterprise, and seat and usage limits unpublished for Amplify. Add-on prices and overage costs are not published either. A free Monitor account does not tell you what a production rollout will cost.

Monitor is limited too: the listed plan has up to five users, up to 10 SPF lookups and only limited automated DMARC. One r/msp commenter described the free reports as hard to use, with summary graphs but little useful detail or drill-down. That is one user’s view, not a universal finding, but it is a reason to confirm what reporting access the free tier actually gives your team.

A Reddit user comparing providers said Valimail’s UI and SPF management had initially stood out, but preferred a competitor’s support and clearer data. Another said cost was a factor in switching. Treat those as individual reports, but budget for a careful feature and quote comparison.

Valimail Monitor is listed at $0 per month, whether billed monthly or annually. It includes up to five users and 10 SPF lookups, so the free tier is not unlimited across every measure. The plan is aimed at teams starting with DMARC, with limited automated DMARC features.

The jump to paid plans is a jump from a published price to a quote: Enforce Starter, Enforce Premium, Enforce Enterprise and Amplify all have custom pricing, with monthly and annual rates not published. Starter includes unlimited users and SPF lookups, but domain and email volume limits are not published. Premium adds subdomain management and reporting, while Enterprise lists API access, SAML/SSO and JIT provisioning, among other controls. Seat, domain and usage allowances are not fully published across the paid plans.

Budget separately for possible add-ons: API access and enhanced support for Starter and Premium are priced on request. Enterprise add-ons and overage costs are also not published. Get the limits and total annual cost in writing before switching.

The available product information describes Valimail’s DMARC monitoring and enforcement features, but does not publish a migration checklist, implementation timeline, or data-export formats. It also does not say how to move existing DMARC records, reports or sender configurations into or out of the service. Ask Valimail what it will handle, what your team must change in DNS, and how you can retrieve your data if you leave.

Lock-in is hard to assess from the published details. Enforce Enterprise lists API access, but that does not establish which data can be exported or whether API access is available on other plans. Confirm those points before signing, along with paid-plan domain and email limits, which are not published.

The review material notes mixed user feedback, but provides no specific Reddit comments or reasons for leaving. We can’t responsibly pin departures on support, pricing or migration problems without that evidence. Treat support quality and exit steps as questions to resolve during procurement.