In today's video, Al Iverson shares four troubleshooting suggestions; things to check when running into unexpected DKIM-related email rejections when sending messages to Microsoft-hosted inboxes. Find Bram Van Daele's blog post about double headers causing Microsoft rejections here: https://xnnd.com/zkcs This is episode 71 of Your Email Authentication and Deliverability Questions Answered.
Valimail
Computer and Network Security
Denver, CO 8,815 followers
Crushing phishing scams by authenticating sender identity since 2015.
About us
Valimail, now a DigiCert company, is the industry leader in redefining email authentication for the zero-trust era. Acquired by DigiCert in 2025, we power continuous identity protection for email within the DigiCert ONE platform — helping organizations secure the world’s most exploited communication channel and extend zero-trust principles to the inbox. DMARC enforcement is only the beginning. Email ecosystems constantly evolve — new senders are added, legacy services linger, SPF records grow fragile, DKIM keys age, and mailbox providers raise the bar. Attackers exploit these gaps long before incidents are detected. Most DMARC programs don’t fail at enforcement. They fail over time. Valimail delivers continuous identity control across the full lifecycle of email authentication. Our cloud-native platform: - Automates and stabilizes SPF - Eliminates fragile configurations and - Continuously monitors authentication health — tracking DKIM strength, sender hygiene, and hidden risks before they become abuse. We extend protection beyond exact-domain spoofing to expose lookalike domains and impersonation activity, complementing existing email security tools by revealing what they can’t see. Together with DigiCert’s leadership in Mark Certificates (MCs) and Verified Mark Certificates (VMCs), Valimail enables BIMI, bringing verified brand logos — including the blue check mark — directly into inboxes. With Valimail Amplify, authentication becomes visible, measurable brand trust. Valimail authenticates billions of messages every month for leading organizations, including Mercedes-Benz, Ryanair, WeWork, and DoorDash.
- Website
-
https://www.valimail.com
External link for Valimail
- Industry
- Computer and Network Security
- Company size
- 51-200 employees
- Headquarters
- Denver, CO
- Type
- Privately Held
- Founded
- 2015
- Specialties
- Email, DMARC, SPF, DKIM, Email Authentication, BIMI, Email Security, and Phishing
Locations
-
Primary
Get directions
3601 Walnut St
5th Floor
Denver, CO 80205, US
Employees at Valimail
Updates
-
Reaching DMARC enforcement matters, but what matters next is keeping that protection strong. 👏 Congrats to these organizations for getting to enforcement and taking the next step toward continuous protection: - Inpay - Meritage Homes - Green Island - The University of Texas Medical Branch - California Department of Tax and Fee Administration - Temple University - Edgewell Personal Care - Sakata Seed America, Inc. - Wastequip - Upper Blackstone Clean Water - Deschutes County - Planet - RAJA - Ocean Beauty Seafoods - Postman - IMG (International Medical Group) If you want to join these teams on the path to continuous protection, we'd be happy to talk.
-
-
Universities are decentralized by design. Different departments, vendors, and systems all sending mail independently sounds like a governance headache… because it is. And that’s exactly what slows down DMARC enforcement. When it comes to DMARC, higher ed has a complexity problem, not an awareness problem. Most .edu domains have started the journey — about 78% have DMARC in some form. But only 33% have actually made it to enforcement. Most are stuck in monitoring mode. Get the full DMARC report to see if your university org is leaving the door open for attackers: https://bit.ly/4uJZgAT
-
16 quarters. 4 years. 459 verified G2 reviews. After all that, Valimail is still the #1-ranked DMARC solution on G2, and we’re grateful to the customers who continue to trust us to simplify DMARC, accelerate enforcement, and protect their organizations from email impersonation. Read more about our recent reports: https://bit.ly/3RJLZKk
-
-
New in Valimail Enforce: Integrations. You can now access mailbox connectors, Microsoft Sentinel, and more from a new Integrations page in Account Settings. It’s a simpler way to connect Valimail with your email and security environment and get more visibility into what’s happening across it. Opt in to Valimail Labs to access Microsoft Sentinel and other available integrations. Learn more here: https://bit.ly/3R7y4O9
-
-
Emails about lab results, billing, insurance, or appointments — patients trust these by default. Which is exactly why the healthcare industry is an attractive target for attackers. And although healthcare is leading the pack in DMARC adoption, more than 40% of domains are exposed. Only enforcement prevents spoofing and phishing. Get the full report to see how your healthcare org can safeguard patients even more with the right email security: https://bit.ly/4dab5KU
-
Time to recap what's going on the world of email in this month's Valimail Community Digest! Today we share the latest on evolving DKIM2 specification, explain how BIMI can improve brand recall, guide you on how to check your DMARC record, and tell you which mailbox provider is now newly enforcing sender DMARC policy on inbound mail. Read on to learn more.
-
What happens when a trusted brand shows up clearly in the inbox? In our recent joint webinar with DigiCert, Valimail's Al Iverson discussed a case study with an international food & beverage company to measure the impact of implementing BIMI with a Verified Mark Certificate. The results were clear: - Email open rates increased by over 18% in the first full month - Engagement stayed strong over the next six months - BIMI helped create greater consumer trust and stronger brand recognition in the inbox For brands, inbox visibility is more than a nice-to-have. It is a trust signal that can drive real engagement. Catch the full recording here: https://lnkd.in/etCfmkpV
-
Valimail reposted this
Yeah, that's about how it feels lately!
-
-
For this week's video, Al Iverson explains what's going on with the new version of DMARC protocol, labeled as DMARCbis, and shares what you might need to know, to better understand this evolution of email domain protection functionality. Want to read the spec for yourself? See https://xnnd.com/dmarcbis