Most DMARC platforms tell you what's broken. A few will walk you through fixing it. Palisade now goes a step further: it manages the DNS records for you, across every email authentication protocol.
Hosted DMARC has been the foundation since day one. Over the last few months, we've completed the suite — adding hosted SPF, DKIM, and BIMI, along with smarter automation at every layer. And now, every hosted feature has a clean, controlled exit if you ever need it.
Hosted SPF - Smarter, Not Harder
SPF has a 10-lookup limit that most domains blow past without realizing. The failure mode is silent — deliverability degrades and nobody knows why. Palisade detects this before it becomes a problem and now does a lot more of the fixing for you.
Lookup limit detection — Palisade automatically flags domains approaching the 10-lookup limit and surfaces hosted SPF as the fix, right when you need it
Static IP detection — when all recent DMARC failures trace back to a single IP, Palisade identifies it as a static source and pre-fills the fix automatically
Hosted DKIM - Your Keys, Managed
DKIM has always been the awkward protocol. Keys rotate, selectors multiply, and tracking them down across a domain portfolio is slow, manual work. Palisade now manages DKIM directly — discovering your existing selectors automatically and hosting the keys so you never have to touch them again.
Automatic selector discovery — Palisade reads your live DMARC sources and surfaces every DKIM selector already in use, no manual lookup required
Bulk setup — add all discovered selectors to your hosted zone in a single action
Automatic DNS configuration — point your nameserver to Palisade and the records are handled automatically
Hosted DMARC - The Policy Layer
DMARC is where it all starts. Palisade manages your DMARC policy record directly — so moving from monitoring (p=none) to enforcement (p=reject) is a setting change, not a DNS project. No copying TXT values, no waiting on a sysadmin, no risk of a typo breaking your email.
Policy management — move from p=none to p=quarantine to p=reject as your domains reach compliance, with Palisade updating the record
Full-stack enforcement — with SPF and DKIM now also hosted, Palisade controls every piece of your authentication stack and can enforce p=reject with confidence
Hosted BIMI — Complete the Set
BIMI is the last piece — and the most visible. When everything else is locked down, Palisade hosts your brand logo and VMC certificate, generates the correct TXT record, and keeps it all pointed at the right place. No file management, no certificate URL hunting.
Managed logo and certificate hosting — Palisade handles hosting and generates the BIMI TXT record automatically
Coordinated activation — Palisade ensures your certificate and logo are fully provisioned before your domain points to them
Full Control - Including the Exit
Every hosted feature now has a clean off-ramp. If you need to move a domain off Palisade-managed DNS — or just disable one protocol — there's a Disable button on each hosted feature page with a typed confirmation to prevent accidents.
Disable any hosted feature independently — SPF, DKIM, DMARC, or BIMI, each with its own exit flow
Non-destructive cleanup — DNS records are removed, but your files and configuration are preserved so re-onboarding is painless
Built for MSPs
Managing email authentication across hundreds of client domains is where manual DNS work breaks down fast. Palisade's hosted suite is built for that scale.
One place to manage everything — SPF, DKIM, DMARC, and BIMI for every domain in your portfolio, without logging into each client's registrar
Clean client offboarding — if a client leaves or migrates, you can disable each hosted feature individually without breaking anything else
Why It Matters
Email authentication is still manual, error-prone work at most MSPs. TXT records get copied wrong. SPF records hit the lookup limit. DKIM keys rotate without anyone noticing. BIMI certificates expire silently.
Palisade's hosted suite removes that work entirely. You set it up once and Palisade handles the rest — monitoring, flattening, record management, key rotation.
Every feature has a clean on and off. You're never locked in, and you're never guessing what Palisade is managing on your behalf.