Email that cannot be faked.
Without SPF, DKIM and DMARC in place, anyone can send email that appears to come from your domain, which puts your customers and your deliverability at risk. Cognivus sets up all three safely, in stages, so impersonation stops without any of your real email being blocked.
What this fixes
- Impersonation: attackers sending invoices or phishing as your domain
- Deliverability: your genuine email landing in spam because the domain is unauthenticated
- Questionnaire gaps: buyers who check your DMARC record before they trust you
How we do it safely
- SPF: list the servers allowed to send your mail (your mailbox provider, CRM, billing tools)
- DKIM: add a cryptographic signature so receivers can verify your mail is genuine
- DMARC, in stages: start at monitor-only (
p=none) with reports, confirm every legitimate sender passes, then move to quarantine, then to reject - Mailbox hardening: multi-factor authentication and the security checklist for Google Workspace or Microsoft 365
- Website: security headers and a
security.txtfile
The staged DMARC rollout is the point: rushing straight to enforcement is what blocks real email, and we never do that.
Frequently asked questions
Will this block our real email?
No, if it is done in stages. We watch DMARC reports and confirm every genuine sender passes before moving to enforcement, so legitimate mail keeps flowing.
Do you read our mailboxes?
No. We change settings and DNS records only, with access through your own admin account. We never need to read message contents.
How long does it take?
Usually one to three weeks. Most of that is the monitoring period where we watch reports before turning on enforcement.
Can you keep monitoring it afterwards?
Yes. Optional ongoing monitoring catches new senders and misconfigurations and keeps the domain protected as you add tools.
Have a product to build or a system to secure?
Tell us what you need. You will receive a written proposal within one business day.