Email protection, managed monthly

Someone could be sending email as your company right now.

If your domain isn't protected, anyone can send emails that look like they come from your address, and your own emails start landing in spam. That's because Gmail and Yahoo now filter senders that aren't properly verified.

The fix is a domain setting called DMARC. We set it up properly so only you can send as your domain, then keep it working as your business changes — because every new tool you connect can quietly break it again. One fixed price per domain.

// reply with your domain, get the report back within a day

security check · yourcompany.com
$check yourcompany.com
SPFincomplete
DKIMpartial
DMARCp=none · not protected
→ result: anyone can send email as you
Required by Google & Yahoo since 2024 Required under PCI DSS 4.0 Enforced by Microsoft since 2025 Only about 1 in 5 domains is protected

Why this matters now

An unprotected domain creates three real problems.

Email providers and security reviews now expect every business to lock down its domain. When yours isn't, it shows up in three ways.

01 / DELIVERY

Your email goes to spam

When your domain isn't verified, providers like Gmail and Outlook stop trusting it. Invoices, password resets and replies start landing in spam, and you usually find out only when a customer says they never got your email.

02 / IMPERSONATION

Scammers can pose as you

Without protection, anyone can send emails that appear to come from your address. They use this to send fake invoices and urgent requests to your own clients and suppliers, in your name.

03 / COMPLIANCE

You fail the security review

Insurers, larger clients and PCI rules increasingly ask you to prove your domain is protected, and they ask again at every renewal. Without ongoing proof, contracts and renewals get held up.

How it works

Set up in stages, so your real email keeps working.

Switching protection on too quickly blocks your own legitimate email. We move in steps and check the data before tightening anything.

1

Send us your domain

Reply to one email with your domain name. Within a day you get a free one-page report showing where you're exposed and what needs fixing.

~24h
2

We set up the protection

We give you the exact settings to add, or add them for you. This verifies your real email senders and starts collecting data on who sends from your domain.

week 1
3

We turn on full protection

Once every legitimate sender is covered, we tighten the policy in stages until impersonation is blocked completely and your domain is fully protected.

~90 days
4

We keep it working

Every new tool you connect can break the setup and push your email back to spam. We catch it before it costs you a customer, block impersonation attempts, and send you a short report each month.

ongoing

The safe path to protection

not protected tightening fully protected ✓

Pricing

One monthly price per domain.

Month-to-month. Cancel whenever you like. Pick the level of help that suits you.

Guided
€150 / month

For teams happy to add a few settings themselves, with us telling you exactly what to paste.

  • 1 domain
  • Full setup to protected status
  • We send the exact records, you paste them
  • Monthly one-page report
  • Support over email
Start with Guided
Compliance
From €500 / month

For finance, healthcare and teams who have to prove protection to auditors, insurers or clients.

  • Everything in Managed
  • Multiple domains
  • Monthly report you can hand straight to an auditor
  • Deliverability and blocklist monitoring
  • Same-day response
Ask by email

Free setup on every plan until the end of 2026.  Normally €250.

How we work

A focused service that does one thing well.

Nicheline handles email authentication and nothing else. That focus means quicker setups, fewer mistakes, and someone who already knows your domain when you write in.

Everything runs on a fixed monthly schedule and is handled in writing, so there's nothing to book and nothing falls through the cracks. Our own domain is set up the same way we'd set up yours, so feel free to check it before you decide.

Free, no commitment

See where your domain stands.

Reply with your domain name and we'll send back a free one-page report: your current setup, where you're exposed, and the steps to fix it.

Get your free report →

Privacy notice

Who we are. Nicheline is an email-protection service operated from the EU. Contact: ales@nicheline.co.

What we collect. Your name, business email and domain name when you contact us. If you become a client, we also store the technical email and DNS details needed to deliver the service. We never ask for your account passwords.

Why. To deliver the service, to reply to you about your setup, and to send initial outreach to business email addresses that are publicly listed online.

Legal basis. Outreach to business contacts: legitimate interest. Clients: performance of our agreement with you.

Sharing. We do not share your data for marketing. To run the service we use a small number of providers (for example a DMARC monitoring platform and, for clients, a payment processor) who act as data processors under their own terms.

How long we keep it. If you ask to be removed from outreach, we delete your details within 7 days. Client data is kept for 12 months after service ends, then deleted.

Your rights. You can ask us to access, correct or delete your data, or object to outreach. Email us and we respond within 30 days.

Opt out. Reply "remove" to any email and we stop all contact straight away.

Last updated: May 2026

← Back to top