Pricing
The scanner, the send test and one enrolled domain with DMARC reports stay free: that is the part that gets you the diagnosis. Paid is the watch that keeps it true — drift and issue alerts per domain, more domains, an API key.
Free
€0
The scanner, the send test and one enrolled domain. No account, no card.
- The public scanner: SPF, DKIM, DMARC, MX, DNSSEC, MTA-STS and TLS-RPT against the RFCs, with the raw records
- The send test: one real message assessed the way a receiving MTA assesses it
- One enrolled domain: DMARC aggregate reports received, parsed and summarised, with the escalation advice towards p=reject
- The weekly summary mail for that domain
Check a domain — no account needed.
Pro
€7 / domain / month
Everything in Free, plus a watch on the records of each domain you pay for.
- Drift alerts: a daily measurement of the records the scan observes, and one mail per change — an SPF record rewritten, a DMARC policy loosened, a DKIM selector gone, the MX replaced, the domain itself vanished
- Issue alerts: a mail when something on the domain needs attention or clears again — a failing check, a DMARC record that stopped sending reports to us, no reports for a week, alignment below the fail line
- Up to 5 enrolled domains at this price, one subscription quantity per domain
- API keys for /api/v1/status with the alignment figure, created and revoked on your account page
- Report exports: every report row of the domain as CSV or JSON, up to 400 days back
Partner
€39 / month
For the IT partner or agency watching many domains at once.
- Everything in Pro, for up to 25 enrolled domains
- Drift alerts and issue alerts on every one of them
- API keys for /api/v1/status with the alignment figure
- Report exports as CSV or JSON for every domain
What stays free, in full
The public scanner and the send test have no account and no limit beyond the per-minute rate limit. One enrolled domain receives DMARC aggregate reports, gets the summary with the escalation advice and the weekly mail, for as long as reports keep arriving. None of that changes with a paid tier, and a cancelled subscription falls back to exactly this.
How the paid tiers work
- Checkout and the subscription run on Stripe's hosted pages; no card data reaches our servers. The receipt and the invoice, with its number, come from Stripe.
- The plan is tied to the email address on the subscription and applies to the enrolled domains with that same address. Pro is priced per domain: the quantity is how many enrolled domains it covers, up to 5; above that Partner is the cheaper bundle.
- Drift alerts are a daily measurement of the records the scan observes, compared with the day before. The first measurement after an upgrade is a silent baseline; from then on one mail per change, with the record before and after, and with a one-click unsubscribe in the headers.
- Issue alerts come from the same daily measurement: a failing check, a DMARC record that no longer sends its reports to us, reports that stopped arriving, or alignment below the fail line. The first mail lists what needs attention now; after that only what opens or clears. On a day with both a record change and an issue, it is one mail.
- Monthly. To cancel or change the number of domains, email help@kangarua.net — there is no self-service portal yet; the plan then runs to the end of the paid period and falls back to free. Prices are in euro, excluding VAT where it applies; Stripe adds it at checkout.