DMARC Reports Page Guide

Understanding the aggregate reports dashboard and filters

4 min read DMARC Reports

DMARC Aggregate Reports

The DMARC Reports page shows aggregate reports sent by email receivers (Google, Microsoft, Yahoo, and others) that tell you how your email authentication is performing. These reports arrive daily and contain statistical summaries of all email sent using your domain.

Domain Selector

Use the domain filter at the top to select which domain's reports to view. If you manage multiple domains, this lets you switch between them without leaving the page.

Date Range Filter

Filter reports by date range to focus on a specific time period. Common selections include last 7 days, last 30 days, or a custom range. Useful for investigating incidents or tracking improvements over time.

Summary Cards

Four cards at the top provide high-level metrics for the selected period:

Card What It Shows
Total Reports Number of aggregate reports received from all reporters
Total Messages Total email messages covered by those reports
Pass Rate Percentage of messages that passed DMARC authentication
Reporters Number of distinct organisations that sent reports (e.g., Google, Microsoft)

Reports Table

The main table lists individual aggregate reports with columns for the reporting organisation, date range covered, total message count, and pass/fail rates. Click a report row to drill into its detailed data.

Source Analysis

Within each report, you can see which IP addresses and email services sent email on your behalf and their authentication results (SPF pass/fail, DKIM pass/fail, DMARC disposition). This is the raw data that drives the SPF Management Decision Queue.

Report Details

Clicking into an individual report shows the full breakdown: every sending IP, the number of messages from each, their SPF and DKIM results, the DMARC policy applied, and the disposition (none, quarantine, or reject) that the receiver took.

Forensic Reports

If forensic (RUF) reports have been received for this domain, a banner links to the forensic reports view. Forensic reports provide details on individual email failures rather than statistical summaries.

Tip

Aggregate reports arrive daily from email receivers (Google, Microsoft, Yahoo, etc.) — they show how your email authentication performed over the past 24 hours. It can take 24-48 hours after configuring DMARC before the first reports arrive.