NovaMX MailControl
SPF, DKIM and DMARC protect your brand and improve deliverability. MailControl combines monitoring, sender intelligence, SPF flattening and a guided path to enforcement.
Free tools
Check SPF, DKIM, DMARC, BIMI or TLS-RPT for any domain. Results in plain language, not raw DNS output.
Standalone
Keep DNS at your current provider. NovaMX analyses reports and shows the exact TXT records to publish after one-time domain verification.
Most DMARC tools dump XML files and leave you to interpret them. MailControl is built for customers who want to act, not decode reports.
With NovaMX domain and mail
MailControl works standalone, but shines when your domain, mail or hosting already runs on NovaMX. DNS publication steps match what the portal shows elsewhere.
What you can order
Mail security is not one switch. Below is what each NovaMX service solves in practice, so you can pick the right step for your domains.
SPF lists which mail systems may send for your domain. Each include counts as a DNS lookup, and receivers stop after ten. When you add newsletters, CRM or cloud mail, that limit breaks and legitimate mail starts failing. Flattening publishes one hosted SPF target that NovaMX refreshes daily, so you stay under the limit without editing DNS every time a vendor changes.
Why this helps: you already have several senders, or SPF checks warn about too many lookups.
DMARC tells receivers what to do with mail that fails SPF or DKIM. Going from monitor to quarantine to reject too fast can block your own mail. Managed DMARC walks you through the steps, shows when it is safe to tighten the policy, and gives the exact DNS records to publish.
Why this helps: you want enforcement that protects the brand without risking delivery from tools you still use.
Receivers send DMARC reports as technical XML. Alone, those files are hard to read. This service gives you a dedicated report address, turns the data into clear sender lists and trends, and recommends the next policy step.
Why this helps: you need to see who sends as your domain before you tighten DMARC.
BIMI can show your logo next to messages in supporting inboxes. Basis helps you publish the logo TXT record. Certificate hosting stores the verified mark certificate (PEM) you bought elsewhere, keeps the link available for receivers, and alerts you before it expires. Growth and higher MailControl bundles include certificate hosting.
Why this helps: you want a recognisable brand mark in the inbox after DMARC is already solid.
Bundles combine monitoring, history and extras on one account for multiple sending domains. Free is for trying one domain. Essential covers a small setup with SPF flattening and DMARC. Growth and above add longer history, BIMI certificate hosting, more domains and message volume. Business and Enterprise add lookalike watching, hosted DKIM, richer reports and export options for larger teams.
Why a bundle helps: you manage more than one domain, or you want monitoring and add-ons together instead of separate line items.
Packages
Prices follow your Preferences choice for excluding or including Dutch VAT (21%). Add-ons are per domain; MailControl bundles cover multiple sending domains on one account.
Keep SPF under the DNS lookup limit when you use many mail senders.
Move from monitoring to reject with guided steps and clear DNS instructions.
Turn receiver reports into a readable view of who sends as your domain.
Free
Publish a logo TXT record so supporting inboxes can show your brand mark.
Host the verified mark certificate receivers need for full BIMI display.
Free
Try hosted DMARC monitoring on one domain before you upgrade.
A small-team bundle: flattening, DMARC and transport reporting for two domains.
More domains, longer history and BIMI certificate hosting included.
For brands that need lookalike watching, hosted DKIM and shareable reports.
Highest volume, longest retention and export into your own monitoring stack.
MailControl asks you to publish a few DNS records at the place where your domain’s DNS is managed. A TXT record is a short text entry in DNS. Verification uses a temporary _novamx-verify TXT so we know you control the domain. SPF is a TXT that lists who may send mail for your domain. DMARC is a TXT that says what receivers should do when SPF or DKIM fail, and where to send reports. BIMI can add a logo TXT (and often a certificate link) so supporting inboxes show your brand mark. MTA-STS and TLS-RPT are optional transport records: they ask other mail servers to use TLS when delivering to you, and to report TLS failures. You only publish what your package and wizard list. The portal shows the exact name and value for each record.
No. After you verify the domain you can keep the website and DNS elsewhere and still order MailControl. Publish the records the portal shows in your current DNS panel.
Create a My NovaMX account, add the domain, publish the verification TXT, then order Free monitoring or a paid package. Use the free mail check on this site anytime to see what the public internet already sees.
Step-by-step articles when you are ready to publish DMARC, SPF or transport policy. Order in My NovaMX when you are ready.
Background articles on SPF, DKIM, DMARC, BIMI, MTA-STS and MailControl products before you change DNS.