Canny Pigeons

Canny Pigeons is a web-based DMARC monitoring service for anyone who has published a DMARC record and then discovered the reports are gzipped XML that nobody can read.

Mailbox providers like Google, Microsoft 365, Yahoo, Comcast and Fastmail already grade your mail and send back daily aggregate reports. Canny Pigeons receives, parses and stores them, then shows you what they actually say: every sender using your domain, identified by IP with its PTR record, network owner, geography and reputation, with forwarding gateways labelled so you can tell a broken sender from a mailing list. Unknown senders get their own view, because the ones you didn't expect are the point.

Policy changes are made from the dashboard rather than in DNS. You publish one CNAME during setup, and moving from p=none to quarantine to reject is a button — hosted DMARC is included on every plan, including the free one. The service also watches for DNS drift, so a record that was correct last quarter doesn't quietly stop being correct.

The free plan is permanent and business use is allowed: one domain, 10,000 compliant messages a month, 30 days of report history, unlimited users. Pro is $19/month for 5 domains, 500,000 messages and 6 months of history. Bulk is custom-priced for agencies and MSPs managing many client domains, with per-domain dashboards for client reporting. Unlimited users are on every tier.

Billing counts DMARC-compliant messages only — mail that passed SPF or DKIM aligned to your domain. Spoofed and unconfigured traffic appears in your reports but never counts toward your limit, so a domain with broken authentication starts near zero. The cap is soft: you get a warning, not a cut-off, and no report is ever dropped.

A set of free checkers runs without an account: DMARC, SPF, DKIM, an email spam checker, and a DMARC report analyzer that renders a single XML file in the browser.