How Much Does DMARC Cost in South Africa?

Publishing a DMARC record costs nothing, because it is just a DNS entry. The real cost is the work of reaching and keeping enforcement: reading reports, aligning every sender and watching for change. In South Africa that means paying in staff time (DIY), in dollar-priced software plus your own time, or in a managed service fee such as MailMarq’s, from R3,290 a year.

The three routes, and where the money actually goes

Every DMARC project has the same shape regardless of who does it. Someone has to assess the current records, publish a monitoring policy, collect and interpret aggregate reports, fix every legitimate service that sends as the domain, move the policy through quarantine to reject, and then keep watching. What changes between options is who does that work and how you pay for it.

• Do it yourself: no invoice, but a meaningful time cost and a risk cost if mistakes block legitimate mail.
• Self-service DMARC software: a subscription for a dashboard that parses the reports. The interpretation and fixing remain yours.
• Managed DMARC: a fee that covers the analysis, the remediation guidance and the policy progression. You approve changes; someone else does the work.

Comparing these only on the sticker price is how businesses end up with a cheap tool, a p=none record and no protection two years later.

The real cost of doing it yourself

DIY is genuinely viable if you have someone who understands DNS, SPF, DKIM and the email platforms in use. The work breaks down roughly like this:

1. Setup: auditing existing records, fixing SPF syntax and lookup counts, generating DKIM keys in your main platform, publishing the DMARC record.
2. Report handling: aggregate reports arrive as compressed XML attachments, typically daily, from every receiving organisation that processed your mail. Without a parser they are close to unreadable. Our guide on how to read a DMARC report shows what is inside.
3. Remediation: identifying each source IP, working out which vendor it belongs to, finding that vendor’s DKIM or custom return-path instructions, and getting DNS changes made.
4. Progression: deciding when the data is good enough to move to quarantine and reject, and handling the fallout if something was missed.
5. Ongoing: checking reports every time a department signs up for a new tool that sends email.

A simple way to price this honestly: estimate the hours for each stage, multiply by the loaded hourly cost of the person doing it, and add the cost of one bad day where invoices or payslips were rejected. For a single domain with two or three senders, the hours are modest. For a business with a dozen domains, an accounting package, a CRM, a newsletter platform and a website contact form, they add up quickly, and they recur.

The hidden DIY cost is attention decay. The project gets done to p=none, the person who did it moves on to other priorities, and nobody reads the reports again.

Self-service software: what you are actually buying

Self-service DMARC software solves the report-parsing problem. It turns XML into charts, groups sending sources and highlights failures. That is useful, and for an organisation with an in-house email administrator it may be all that is needed.

Three cost factors are easy to miss:

• Currency exposure. Many international tools are priced in dollars or euros. A licence that looked affordable at budget time can cost noticeably more after a few months of rand weakness, and card payments may attract foreign transaction fees.
• Tier creep. Pricing is usually tied to domains, message volume or both. Adding parked domains or a growth in newsletter volume can push you into the next tier.
• The work is still yours. The software tells you that an unknown IP sent 4,000 messages. It does not phone the vendor, configure custom DKIM or recommend the date to move to reject.

If you go this route, ask how the tool handles currency, what happens when you exceed a tier mid-year, how long report history is retained and whether any human guidance is included. Those answers determine the real annual cost far more than the headline monthly figure. We compare the two models in more depth in managed DMARC vs DMARC software.

What drives the price, whichever route you take

Four variables determine how much effort and money any DMARC programme needs:

Before you request any quote, count these four things. It will make every comparison more accurate.

A five-minute sizing exercise

Sit down with whoever handles accounts, marketing and IT and answer these questions together:

1. Which domains do we own, including old brand names, .com and .co.za variants and domains bought defensively?
2. Which of those domains actually send email, and which only receive or do nothing?
3. Which services send as us: the main mailbox platform, accounting and invoicing, payroll, CRM, newsletters, e-commerce notifications, booking systems, the website contact form, scanners and printers?
4. Roughly how many messages leave each sending domain in a busy month, including month-end statements?
5. Are there senders that only run quarterly or annually, such as tax certificates or AGM notices?

The answers almost always surprise people. Most businesses undercount their senders, and those forgotten services are exactly what breaks when a policy is tightened without evidence.

What MailMarq costs

MailMarq is priced in rand, billed annually, with no setup fees. All prices exclude VAT.

Every package includes the same managed process: assessment, observation over at least one full business cycle, remediation of legitimate senders, evidence-based progression to quarantine and reject with your written approval, and year-round monitoring for new and failing senders. SPF lookup review (with flattening where needed), DKIM selector discovery, TLS reporting and parked-domain lockdown are part of the work. No mailbox passwords are needed. Full detail is on the pricing page.

The hidden cost of doing nothing

The comparison that matters most is not between providers. It is between any of them and leaving the domain unprotected. The costs of inaction do not appear on a quote:

• Fraud exposure. A spoofed banking-details change can cost more in a single payment than many years of any DMARC option. The mechanics are covered in how email spoofing leads to invoice fraud.
• Deliverability drift. Major mailbox providers now treat authentication as a baseline. Weak setups risk invoices and statements landing in junk.
• Reputation. When clients receive fraudulent mail that genuinely appears to come from your domain, the conversation that follows is about your controls, not the criminal’s.
• Governance. POPIA section 19 expects appropriate, reasonable technical measures. A free, well-known control left unimplemented is harder to defend.

Decision table: which route fits

If you are unsure where you sit, start by finding out what you already have. A two-minute scan with the DMARC checker shows whether a record exists, what policy it enforces and whether SPF is within its limits.

How MailMarq helps

MailMarq gives South African businesses a fixed annual rand price for the whole journey to enforcement, with the reading, chasing and recommending done for you. Every engagement starts with a free assessment, so you know exactly what is involved before you commit. Get in touch to request yours.

Frequently asked questions

MailMarq
MailMarq is a managed DMARC service run from Johannesburg. Our team has built and managed business websites, hosting and email infrastructure for South African companies since 2016, and writes these guides from work on real domains.