Digital Trust Hub / Membership / Domain Trust Monitor
Member benefit · Included
Every email your district sends should be provably yours.
Domain Trust Monitor watches your email domains around the clock, scores how trustworthy they look to the rest of the internet, and shows your team exactly what to fix next.
The problem
Anyone can send email that claims to be your district.
Unless your domains publish the right records and enforce them, a scammer can send a message that looks like it came from your superintendent, your payroll office or your school nurse. Parents, staff and vendors can’t tell the difference.
The fix is a set of standards (SPF, DKIM, DMARC and friends) that most districts know they need but rarely have time to deploy, monitor and maintain. Getting to enforcement takes weeks of watching reports from every service that sends mail on your behalf: your SIS, your notification system, your newsletter tool. Domain Trust Monitor does the watching.
Features
Trust score and coaching
From unprotected to Full Trust, one step at a time.
Every domain gets a 0–100 trust score and a place on a five-stage maturity journey. Plain-language coaching explains each protection, flags the next priority action and calls out K-12 quirks in systems schools use every day.
DMARC reporting
See every service sending mail as you.
Add one address to your DMARC record and reports start flowing in automatically. The dashboard shows 30-day message totals and pass rates, and it groups every sending source so you can spot the one that isn’t aligned before you enforce.
- DMARC analyzer with source classification
- Sources below a 90% pass rate highlighted
- SMTP TLS reports (TLS-RPT) viewer
Alerts
Know the moment something breaks.
Daily DNS checks and seven alert types catch problems before your community does: a new failing source, a pass-rate drop, a policy regression, a missing or invalid record, or an SPF record over its lookup limit. Duplicate alerts are suppressed, so the ones you get matter.
Beyond DMARC
Close the gaps DMARC can’t.
DMARC stops spoofing of your exact domain. It can’t stop someone registering a domain that looks like yours. Lookalike Watch scans for them daily and shows registration and hosting details, including the registrar’s abuse contact. A nightly blacklist monitor makes sure your own mail keeps landing in inboxes.
- Lookalike Watch, opt-in, with allowlist and dismiss
- Nightly blacklist checks with listing trends and remediation guidance
- DNS change history for every domain
Checked daily
Seven protections. Eight tools.
Every domain is checked every day. When your team needs to dig in, the diagnostic tools are built in.
Protections monitored
Built-in tools
Cost
Enterprise-grade monitoring. No enterprise invoice.
Commercial DMARC platforms typically charge by domain or by seat. For a district with 5 to 10 domains, that can run from hundreds to thousands of dollars a year.
Commercial DMARC tools
per year for a typical district, often with per-domain fees, seat limits and feature tiers.
Domain Trust Monitor
for Digital Trust Hub members. Unlimited domains and users, and every feature.
Getting started
Up and running in an afternoon.
- Join the Hub. Domain Trust Monitor comes with membership.
- Get invited. Your team receives accounts scoped to your organization, with administrator and viewer roles.
- Point your reports. Add the Hub’s reporting address to your DMARC record, and data starts flowing within a day.
- Follow the coaching. Work through the priority actions until every domain reaches Full Trust.
Your DMARC record, with reporting to the Hub
Start at p=none to monitor safely. Domain Trust Monitor tells you when it’s safe to move to quarantine and reject. Dashboards shown on this page are illustrative.
Protect your district’s name in every inbox.
Domain Trust Monitor is one of many benefits of Digital Trust Hub membership. Let’s get your domains to Full Trust.