The product
One thing, done completely.
Clarsend turns the DMARC aggregate reports your domains already receive into something you can read, monitor and act on. Here is the detail, feature by feature.
Collecting the reports
IMAP mailboxes
One or several per organisation, credentials encrypted at rest. Scheduled polling.
A reliable cursor
A report that fails to process is retried, not skipped — and raised as an incident if abandoned.
Manual upload
Drop a file by hand for a one-off check, and re-fetch by date to backfill history.
Ingestion is hardened: file-signature validation, gz/zip decompression capped on actual bytes, XML parsing without external entities. A report is a file from the outside world, and it is treated as one.
Reading what they contain
Dashboard
Volumes, failure rates, trend charts.
Per-domain view
DNS health (SPF, DKIM, DMARC checked and explained), history snapshots, learning mode.
Sender timeline
With a list of allowed senders specific to each domain.
IP enrichment
Geolocation and sending provider recognised with a confidence level — 23 providers natively, from Google Workspace and Microsoft 365 to SendGrid, Mailchimp, Brevo, Mailjet, OVH and Infomaniak.
Getting told
Two triggers
Failure threshold crossed, and silent domain — no report for N days. Thresholds and cooldown are configurable.
The channels
Email and Infomaniak KChat. Custom channels — generic webhook, Slack, Discord, Telegram — belong to a paid plan.
No nasty surprises
A test button per channel, protections against redirected outbound calls, and a history of alerts sent.
Security and privacy
What you entrust to us is handled accordingly.
- One database per organisation — isolation is not a filter in a query.
- Secrets encrypted at rest: IMAP, TOTP, SMTP, channel configuration.
- TOTP two-factor authentication, recovery codes, revocable sessions, login rate limiting.
- Audit log: logins, passwords, 2FA, deletions, with IP and device.
- Real GDPR deletion: 30-day grace period, cancellation link by email, actual purge of the database.
- Proof of acceptance for contractual documents: version, hash, server-side timestamp.
The interface is bilingual English and French, in light and dark themes, with audited contrast.