Your emails are landing in spam, bouncing, or disappearing with no error you can see. Usually the message is fine. The problem is the DNS: a missing or broken SPF record, no DKIM signature, a DMARC policy left on none (or switched to reject before the rest was ready), and a sending domain nobody warmed up.
We fix all of it in one pass. You hand us the domain and tell us what sends mail for you. We correct the records, get every sender signed, clear any blacklist entries, and test real placement against Gmail, Outlook, and a couple of business inboxes before we call it done.
This is one job at a fixed price. We are not signing you up for a sending platform or a monthly monitoring seat. When we finish you own the configuration, and we hand you the records so you can see exactly what changed.
Services we combine
Who it's for
This fits a business whose own mail keeps landing in spam or bouncing: invoices, password resets, order confirmations, sales replies. It fits a site that just changed hosts and watched its email break. It fits a small team that set up Google Workspace or Microsoft 365, added a CRM or a newsletter tool that sends on their behalf, and never lined up the DNS so all of it authenticates.
It is not a cold-email or bulk-sending setup. We harden the mail you send to people who expect it. If you want to run cold outreach at volume, that is a different job with different risks, and we will say so rather than take the work.
-
The business that just migrated
You moved hosting or changed mail providers, and now confirmations and resets land in spam. We re-authenticate everything for the new setup.
-
The team running Workspace or 365 plus extra senders
Your CRM, helpdesk, and newsletter tool all send as your domain. We get every one of them passing SPF and DKIM.
-
The store losing order emails
Customers say the receipt never arrived. We fix the sending path so transactional mail reaches the inbox.
How it runs
We start by reading your current DNS and sending setup, then push test mail through each of your real senders to see where it lands and why. Most of the work is correcting records and getting every sender signed. The slow part is DMARC: we raise the policy in stages so we do not block your own legitimate mail on day one.
Audit
We map every system that sends as your domain and test where its mail currently lands.
Day 1Authenticate
SPF rewritten, DKIM signing added or repaired on each sender, PTR and HELO checked.
Days 2-3Clean up reputation
Blacklist checks across the major RBLs, delisting requests filed where needed.
Day 3Tighten DMARC and verify
We raise the DMARC policy in steps, then test real inbox placement before signoff.
Days 4-5Price, and what happens after
The fix is $390, billed once. That covers one domain and the senders attached to it. If you run several domains or a messier setup, with multiple sending servers and a dozen third-party tools, we quote it after the audit so you know the number before we start.
Tooling we lean on
Where this fits
This is the packaged version of our email setup and deliverability work. If your mail runs on your own box, the same fixes are covered in detail on the mail on a Linux server page. If you are on Google Workspace or Microsoft 365, see hosted email setup for how we authenticate senders there. Not sure which applies? Send us the domain and we will tell you what is broken before you pay anything.
New to the three records this depends on? Start with our guide to SPF, DKIM, and DMARC without the jargon.
Not sure yet whether you need the full audit? Start by reading the bounce message you already have. The status code in it usually tells you whether the fault sits with your DNS or the recipient.
Emails still going to spam?
Send the context — your stack, the scope, any complications. We come back with a confirmation or a couple of clarifying questions.