- Your DNS is not on Cloudflare, or you need subdomain zones covered; Cloudflare DMARC Management works only on apex domains that use Cloudflare DNS
- You want sources categorized (email service provider, own infrastructure, forwarder or suspected spoofing), an explanation of why each fails, and a per-domain list of what blocks p=quarantine or p=reject: too few days of data, a failing source or traffic nobody has reviewed
- You want a weekly email summary every Monday across all domains, and report data through a REST API and MCP server; Cloudflare's API and its API MCP server return this product's settings and status, not report data
- You also test campaigns before they send: spam score, seed-list inbox placement across 7 mailbox providers and client previews, in the same account
A Cloudflare DMARC Management alternative that works on any DNS provider
Cloudflare DMARC Management shows aggregate reports at no separate charge, but it requires Cloudflare DNS. Unspam charges $6 per domain per month, first domain included, works on any DNS provider and adds a report API and pre-send testing.
Compared from public pricing and product pages, November 2026.
Which one fits you?
- Your domains already use Cloudflare DNS: DMARC Management is available on every Cloudflare plan, Free included, with no separate charge, while Unspam has a $5 monthly minimum and charges $6 per domain per month after the first
- You want to act on the records in the same place: Cloudflare adds its rua address to your DMARC record, approving a source updates SPF (unless SPF sits behind a CNAME to an external domain), and you create and edit DMARC, SPF and DKIM records in the dashboard
- You want a quick view inside a dashboard you already use: a graph of up to 30 days, the top 10 sources, an SPF lookup-count warning, and DMARC record errors flagged by Security Insights scans (every 7 days on Free, daily on Enterprise)
Why teams move from Cloudflare DMARC Management to Unspam.
Works wherever your DNS lives
Cloudflare DMARC Management needs Cloudflare DNS and covers apex domains only. Unspam works on any DNS provider: it generates one DNS record or adds its reporting address to your existing record without changing your policy, verifies it automatically, and first reports usually arrive 24 to 48 hours later.
Sources explained, and a readiness verdict
Cloudflare lists sources and their pass and fail results. Unspam also categorizes each source, marks it compliant, partially failing, failing or unauthorized, explains why it fails, and checks per domain what still blocks p=quarantine or p=reject, such as too few days of data or unreviewed traffic.
Report data outside the dashboard
Cloudflare's API for this product, and its API MCP server, return settings, approved sources and record status, not report data, and neither the product docs nor Cloudflare's list of notification types describes an emailed summary. Unspam emails a weekly summary every Monday across all your domains and returns report data through a REST API and an MCP server on the Custom plan.
Test the email before it sends
DMARC reports tell you what happened after mail went out. In the same Unspam account you run spam score tests, seed-list inbox placement across 7 mailbox providers and client previews before a campaign sends, priced per test on the Custom plan, with 5 spam tests and 3 inbox placements a month on the Free plan.
Unspam vs Cloudflare DMARC Management, feature by feature.
Based on public product pages and documentation. Spotted something outdated? Tell us in the chat and we'll fix it.
- Included
- Partly or with limits
- Not offered
Feature
Unspam
Cloudflare DMARC Management
Free plan or trial
First domain free on the Custom plan
No separate charge, included on all Cloudflare plans
First paid plan
$5/mo Custom plan minimum, then $6 per domain per month
No separate charge; requires Cloudflare DNS
Aggregate (RUA) report monitoring
Yesfirst domain free
Yes
Sending sources named and classified
YesESP, own, forwarder, spoofing
Yesapprove a source into SPF
Guidance to p=reject
Yespolicy readiness checks
Partialedit the policy in the dashboard, no readiness check
Failure (RUF) reports
No
No
Hosted DMARC record
No
Norecord lives in your Cloudflare zone
Hosted SPF / SPF flattening
No
Nolookup-limit warning, no flattening
Hosted DKIM
No
No
BIMI
Partialchecked in spam tests
Partiallists BIMI records in the API
MTA-STS / TLS reporting
No
No
Alerts
No
PartialDMARC record errors in Security Insights, emailable
Scheduled email reports
Yesweekly, every Monday
Nonone documented
API access
YesCustom plan
Partialsettings and status, not report data
MCP server
YesCustom plan
Partialsettings and status via Cloudflare's API MCP server
MSP / multi-tenant
Partialup to 500 domains in one account
No
Managed enforcement service
No
No
Pre-send email testing
Yesspam score, placement, previews, verification
No
Compared from public pricing and product pages, November 2026.
What each one costs.
- Custom $5/mo
DMARC monitoring at $6 per domain per month, first domain included at no charge, up to 500 domains, 15% off annual billing. Aggregate reports, named sending sources, policy readiness checks, a weekly email summary, REST API and MCP server. Spam tests, inbox placement and previews are priced per test in the same plan.
- Free $0
Spam tests, inbox placements, previews and heatmaps each month, no card. DMARC monitoring is not included.
- All Cloudflare plans No separate charge
Aggregate report processing, a top 10 sources view and a list of all sources with SPF, DKIM and DMARC results, source approval into SPF, DMARC, SPF and DKIM record editing, an SPF lookup-count warning, a dashboard graph covering up to 30 days
Requires Cloudflare DNS and works on apex domains only, not subdomain zone setups.
How these prices work
- Cloudflare's DMARC Management overview says it is available on all plans to Cloudflare customers with Cloudflare DNS; no separate price, per-domain price or paid tier is listed, and the Cloudflare plans page does not mention DMARC.
- The enable and statistics pages still call it DMARC Management (beta).
Every Cloudflare DMARC Management plan and price in full
Compared from public pricing and product pages, November 2026. Cloudflare DMARC Management is a trademark of its respective owner. Unspam is not affiliated with or endorsed by Cloudflare DMARC Management.
Trying Unspam alongside Cloudflare DMARC Management
-
Add your domain
Enter it in DMARC Reports. The first domain is free on the Custom plan, and Unspam generates the record to publish or adds its reporting address to the record you already have.
-
Publish one DNS record
Paste the value at your DNS provider. Your mail flow and your policy do not change, and every other report recipient in the record is kept.
-
Read your first reports
Unspam verifies the domain once the record is live. Mailbox providers usually send their first aggregate reports 24 to 48 hours after that.
Unspam vs Cloudflare DMARC Management, answered.
Is Unspam a replacement for Cloudflare DMARC Management?
If your domains use Cloudflare DNS and a 30-day view of sources is enough, Cloudflare covers the basics with no separate charge. Unspam's DMARC monitoring is the replacement when your DNS is elsewhere, when you need subdomain zones, or when you want sources explained, a readiness check for enforcement, a weekly summary and report data through an API.
What does Unspam do that Cloudflare DMARC Management doesn't?
Unspam categorizes sending sources and explains why each one fails, checks whether each domain is ready for quarantine or reject, sends a weekly email summary, and returns report data through a REST API and an MCP server. It works on any DNS provider. Neither product processes failure reports or hosts MTA-STS. Cloudflare's advantage is that it edits your DNS records directly: approving a source updates SPF.
How do the prices compare?
Cloudflare DMARC Management has no separate charge on any Cloudflare plan, as long as the domain uses Cloudflare DNS. Unspam's DMARC monitoring is $6 per domain per month with the first domain included and a $5 monthly minimum: 3 domains cost $12/mo ($6 x 2) and 5 domains cost $24/mo ($6 x 4), with 15% off annual billing. For domains already on Cloudflare DNS, Cloudflare costs less. See pricing.
Can I use both?
Yes. Cloudflare adds its own rua address to your DMARC record when you enable it, and Unspam adds its reporting address to the same record without changing your policy. Unspam puts its address first in the rua list, because receivers work through the list in order and may stop before the end. The DMARC checker shows what your record lists.
Does Cloudflare DMARC Management work if my DNS is hosted elsewhere?
No. Cloudflare's docs say it is available to customers with Cloudflare DNS, and it works only on apex domains, not domains in a subdomain setup, so using it means moving the domain's DNS to Cloudflare. Unspam works with the DNS you already have: it adds its reporting address to your existing DMARC record, or the DMARC record generator builds one if you have none.
How do I move from Cloudflare DMARC Management to Unspam?
Add the domain in Unspam and publish the record it gives you, which adds Unspam's reporting address to your existing DMARC record without changing your policy. Unspam reads the reports that arrive after that, usually from 24 to 48 hours after verification, so it does not import Cloudflare's history. Keep both addresses for a few weeks if you want an overlap, then remove Cloudflare's rua address from the record.