NovaMX MailControl

Stop fake mail from your domain, with or without hosting.

SPF, DKIM and DMARC protect your brand and improve deliverability. MailControl combines monitoring, sender intelligence, SPF flattening and a guided path to enforcement.

Free tools

Free mail security check

Check SPF, DKIM, DMARC, BIMI or TLS-RPT for any domain. Results in plain language, not raw DNS output.

Standalone

Order without hosting

Keep DNS at your current provider. NovaMX analyses reports and shows the exact TXT records to publish after one-time domain verification.

  1. Create a My NovaMX account and verify the domain with the _novamx-verify TXT record.
  2. Order SPF Flattening, DMARC Reports, Managed DMARC or a MailControl bundle.
  3. Copy SPF, DKIM and DMARC records from the portal into your DNS provider.
  4. Review MailControl reports for 24–48 hours before moving DMARC to quarantine or reject.

Why MailControl

Most DMARC tools dump XML files and leave you to interpret them. MailControl is built for customers who want to act, not decode reports.

  • Aggregate DMARC reports with sender intelligence
  • Enforcement wizard from monitor to reject
  • Hosted SPF flattening with daily refresh
  • Alerts, exports and policy history

With NovaMX domain and mail

Security that knows your DNS

MailControl works standalone, but shines when your domain, mail or hosting already runs on NovaMX. DNS publication steps match what the portal shows elsewhere.

What you can order

What each service does, and why it helps.

Mail security is not one switch. Below is what each NovaMX service solves in practice, so you can pick the right step for your domains.

SPF Flattening

SPF lists which mail systems may send for your domain. Each include counts as a DNS lookup, and receivers stop after ten. When you add newsletters, CRM or cloud mail, that limit breaks and legitimate mail starts failing. Flattening publishes one hosted SPF target that NovaMX refreshes daily, so you stay under the limit without editing DNS every time a vendor changes.

Why this helps: you already have several senders, or SPF checks warn about too many lookups.

Managed DMARC

DMARC tells receivers what to do with mail that fails SPF or DKIM. Going from monitor to quarantine to reject too fast can block your own mail. Managed DMARC walks you through the steps, shows when it is safe to tighten the policy, and gives the exact DNS records to publish.

Why this helps: you want enforcement that protects the brand without risking delivery from tools you still use.

DMARC Reports

Receivers send DMARC reports as technical XML. Alone, those files are hard to read. This service gives you a dedicated report address, turns the data into clear sender lists and trends, and recommends the next policy step.

Why this helps: you need to see who sends as your domain before you tighten DMARC.

BIMI basis and certificate hosting

BIMI can show your logo next to messages in supporting inboxes. Basis helps you publish the logo TXT record. Certificate hosting stores the verified mark certificate (PEM) you bought elsewhere, keeps the link available for receivers, and alerts you before it expires. Growth and higher MailControl bundles include certificate hosting.

Why this helps: you want a recognisable brand mark in the inbox after DMARC is already solid.

MailControl bundles

Bundles combine monitoring, history and extras on one account for multiple sending domains. Free is for trying one domain. Essential covers a small setup with SPF flattening and DMARC. Growth and above add longer history, BIMI certificate hosting, more domains and message volume. Business and Enterprise add lookalike watching, hosted DKIM, richer reports and export options for larger teams.

Why a bundle helps: you manage more than one domain, or you want monitoring and add-ons together instead of separate line items.

Packages

Choose the level of help your domains need.

Prices follow your Preferences choice for excluding or including Dutch VAT (21%). Add-ons are per domain; MailControl bundles cover multiple sending domains on one account.

SPF Flattening

Keep SPF under the DNS lookup limit when you use many mail senders.

  • Hosted SPF target refreshed daily
  • Lookup-count monitoring
  • No hosting required

Managed DMARC

Move from monitoring to reject with guided steps and clear DNS instructions.

  • Guided DMARC wizard
  • Policy ramp support
  • DNS publication instructions

DMARC Reports

Turn receiver reports into a readable view of who sends as your domain.

  • Dedicated report address
  • Source intelligence and trends
  • Policy recommendations

BIMI basis

Free

Publish a logo TXT record so supporting inboxes can show your brand mark.

  • Logo URL and logo-only TXT guidance
  • No hosting or mail package required

BIMI certificate hosting

Host the verified mark certificate receivers need for full BIMI display.

  • Upload external VMC/CMC PEM
  • Hosted certificate link and expiry alerts

MailControl Free

Free

Try hosted DMARC monitoring on one domain before you upgrade.

  • 1 domain, 10 days history
  • Hosted DMARC monitoring
  • Security score and deliverability check

MailControl Essential

A small-team bundle: flattening, DMARC and transport reporting for two domains.

  • 2 sending domains
  • SPF flattening + DMARC + MTA-STS/TLS-RPT
  • 3 months report history

MailControl Growth

More domains, longer history and BIMI certificate hosting included.

  • 8 sending domains, 1M messages/month
  • 12 months history
  • BIMI certificate hosting included

MailControl Business

For brands that need lookalike watching, hosted DKIM and shareable reports.

  • 15 sending domains
  • Lookalike monitoring and hosted DKIM
  • PDF/HTML reports and 18 months history

MailControl Enterprise

Highest volume, longest retention and export into your own monitoring stack.

  • 30 sending domains, 10M messages/month
  • 2 years history and MailControl Ops
  • API and SIEM export