Someone is sending invoices from your exact domain. Your DMARC policy says p=none — Aquila I DMARC sets up SPF, DKIM and DMARC, reads the reports and moves your domains from p=none to p=reject as a managed service, then adds your verified BIMI logo — with SPF flattening, MTA-STS and VMC tracking in the same contract.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
This page covers Aquila I DMARC — with Aquila I BIMI, the logo-display product, folded in. The rest:
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
DMARC tells mailbox providers to reject mail faking your domain; BIMI then shows your verified logo on the real thing.
What consolidation actually replaces, dimension by dimension.
| Dimension | A domain left at p=none | Aquila I DMARC |
|---|---|---|
| DMARC policy | Stuck at p=none for years | Moved to quarantine, then reject, in phases |
| Reports | Raw XML nobody opens | Aggregate and forensic reports, parsed |
| Unknown senders | Found when mail bounces | Mapped, with an alert for each new sender |
| SPF limit | Too many lookups, silent failures | Flattened record with DNS change history |
| Brand in the inbox | A grey initial | Your verified BIMI logo, with VMC tracked |
| What it is NOT | — | An inbound mail filter, or a published price |
The cheapest test is one domain at p=none for a month: read what the reports reveal about who sends as you before committing to enforcement.
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
SPF authorises your senders, DKIM signs outgoing mail, DMARC tells receivers what to do with failures, and a BIMI record points to your logo; all of it lives in your DNS.
Mailbox providers send aggregate and forensic (RUF) reports to an address Aquila I manages; they are parsed into sender-level pass and fail views with no manual XML work.
Channel visibility, real-time spoofing insights with IP and location mapping, per-domain compliance scores, VMC status and logo display tracking, in one view.
Aquila I says it guides every phase from deployment to maintenance, so the move from p=none to p=reject is run with you rather than left to your team.
Records live in your DNS, reports flow to Aquila I’s SaaS, and its team runs the move to p=reject — the hosting region for report data is not published.
Aquila I DMARC takes your domains from monitoring to enforcement with you — then puts your verified logo in the inbox.
SPF authorises legitimate senders, DKIM signs outgoing mail, and an initial DMARC policy starts monitoring across your domains.
Authorised and unknown senders are mapped, third-party services identified, and an automated alert raised for each new sender.
Aggregate and forensic (RUF) reports become pass and fail ratios, sender breakdowns and trends, with no manual XML processing.
Policy moves from none to quarantine to reject only after legitimate senders are found and authorised, so real mail keeps flowing.
SPF flattening keeps every email vendor inside one maintained record, and DNS history tracks each change and its effect on delivery.
MTA-STS is set up and monitored with daily TLS reports, guarding inbound mail against downgrade attacks and misconfiguration.
Once DMARC is at quarantine or reject, a BIMI record lets supporting mailbox providers show your verified logo beside your mail.
Verified Mark Certificates are tracked from issuance to renewal, and the SVG logo is validated against the BIMI specification.
Logo display is tracked across major mailbox providers; Aquila I claims BIMI lifts open rates by up to 10%, its own figure.
Two short videos from Aquila I’s official channel, both from 2022: an explainer on what DMARC is and how it works, and an introduction to BIMI.
A 1:42 explainer from Aquila I, published in 2022, on what DMARC is and how it works for a domain owner.
A 2:20 video from 2022 on BIMI, the standard that shows your brand logo beside authenticated mail from your domain.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Here’s what genuinely sets it apart — and exactly where it stops.
Most domains stall at p=none because nobody wants to block the payroll or CRM mail. Aquila I sells assisted deployment and management: it guides SPF, DKIM and DMARC set-up, finds every sender, then moves policy to quarantine and reject, with one-time implementation or full-time support as the options.
Beyond DMARC reports it covers forensic (RUF) analysis, SPF flattening for the 10-lookup limit, MTA-STS with daily TLS reports, DNS change history and monitoring for new domains containing your brand terms. Gmail and Yahoo have required DMARC from bulk senders since February 2024, so this is now table stakes.
Once DMARC reaches quarantine or reject, BIMI puts your verified logo beside your mail in supporting inboxes. Aquila I manages the VMC certificate from issuance to renewal, validates the SVG logo and tracks where it displays. It claims open rates rise by up to 10%; treat that as its own figure.
Pricing is quoted and ‘fully customizable’, with no list price, INR list or stated meter. Whether the VMC certificate fee is inside the quote is not stated. The hosting region for report data is not published, there is no free tier, and Aquila I publishes no named customer case studies. Get each in writing.
List every domain, parked ones included, and every service that sends as you: payroll, CRM, marketing, ticketing and billing.
Publish SPF, DKIM and DMARC at p=none with reports going to Aquila I, and agree the hosting region for report data in writing.
Work through the aggregate reports, authorise each legitimate sender, flatten SPF if needed, and switch on new-sender alerts.
Move to p=quarantine, watch for legitimate mail failing, then move to p=reject once reports stay clean for a few weeks.
With reject in place, get the VMC certificate and SVG logo ready for BIMI, set up MTA-STS, then settle the INR quote with GST.
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
“We sat at p=none for two years. With their team finding our payroll and CRM senders, we reached reject in one quarter.”
“SPF flattening fixed the lookup errors our marketing tools kept causing, and the new-sender alerts catch shadow tools early.”
“Forensic reports showed a spoofing run against our dealer network, so we could warn dealers before invoices went out.”
“BIMI took longer than DMARC because our logo trademark paperwork was the slow part; the VMC tracking helped afterwards.”
“Forensic samples can hold customer details, so we asked where reports are stored. The region was not published; it is now a clause.”
“Good managed service, but the ‘customizable’ quote took several rounds before we knew what was counted per domain.”
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the DMARC and email authentication market — tap any vendor to see why it sits where it does.
Execution strength vs product vision — the classic market map, minus the paywall.
Quote-only; India-built; no named customers or analyst placement.
The grid nobody publishes — how much of the DMARC work the vendor does for you vs how much of the domain toolkit it covers: SPF, MTA-STS, BIMI and VMC.
Managed delivery; SPF flattening, MTA-STS, BIMI with VMC tracking.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Against Mimecast DMARC Analyzer, Proofpoint Email Fraud Defense, Valimail, EasyDMARC and Red Sift OnDMARC — on delivery, reports, senders, SPF, MTA-STS, BIMI, price and India data.
| Dimension | Aquila I DMARC | Mimecast DMARC Analyzer | Proofpoint Email Fraud Defense | Valimail | EasyDMARC | Red Sift OnDMARC |
|---|---|---|---|---|---|---|
| What it is | Managed DMARC + BIMI | DMARC to p=reject | Managed DMARC, enterprise | Automated DMARC | Self-serve DMARC SaaS | OnDMARC by Red Sift |
| Delivery model | Assisted and managed | Guided self-service | Managed service | Automation-led | Self-serve, CSM above | Self-serve, trial first |
| Report handling | Aggregate and forensic | Readable reporting | Aggregate and forensic | Monitor, then Enforce | History by plan | Full protocol reports |
| Sender discovery | Alerts on new senders | Shadow-sender detection | Plus app mail relay | Identifies services | Sender Insights, custom | Check in the trial |
| SPF handling | SPF flattening | Reported, not flattened | Hosted records | Unlimited SPF | EasySPF on Premium | Unlimited SPF lookups |
| MTA-STS and TLS reports | MTA-STS, daily TLS | Not on TechBag’s page | Not on TechBag’s page | Ask Valimail | Managed MTA-STS | MTA-STS and TLS-RPT |
| BIMI and VMC | BIMI with VMC lifecycle | BIMI readiness | Not documented | Amplify add-on | Managed BIMI | BIMI; 1 VMC in Enterprise |
| Lookalike domains | Brand-term domains | Not documented | Domain Discover | Not documented | Threat Intelligence tier | Ask Red Sift |
| Free tier or trial | Demo only | Not published | Not published | Monitor is free | Free trial, no free plan | Free trial |
| Pricing model | Customised quote | Per domain | Quote-only | Tiers on request | Monthly, by domains | Domains and volume |
| Published entry price | Not published | Not published | Not published | Free; Enforce quoted | $35.99/month | From $9/month |
| India data region | Not published | Not documented | India residency | Not documented | Not documented | Not documented |
| Lock-in and exit | Rebuild flattened SPF | Records stay yours | Hosted records to move | Automation to unwind | Plain DNS, light exit | Rebuild SPF to leave |
| Best fit | Hands-off Indian buyers | Mimecast estates | Large Proofpoint estates | Automation-first teams | Small teams, list price | Low-cost full protocol |
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Aquila I DMARC is one of 36 email security products TechBag carries. The Email Security guide narrows them to a shortlist and shows the reasoning. →
Drag the sliders (domains you send from; IT-hour cost). Estimates model the IT time spent reading raw DMARC reports, chasing unknown senders, fixing SPF lookup errors and handling spoofing complaints, at an assumed 1.5 hours per domain a month, with 70% of it removed by parsed reports and a managed service. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Quote only. Aquila I publishes no price for DMARC or BIMI and no INR list; its own words are “a platform with a price that comes fully customizable to suit your needs”, with “one-time implementation, full-time support” as the delivery options. It does not say whether domains or mail volume are counted, or whether the VMC certificate fee is included. TechBag lists your domains and senders first, then gets the quote itemised in INR with GST.
Best for reaching p=reject with a managed team
Best for a broader rollout
Best once DMARC is at quarantine or reject
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Tell us your requirements and current tools — we’ll model it against what you spend today.
Take this into your next vendor call — including ours.
How many domains, including parked and subsidiary ones, are in scope, and does the quote count domains or mail volume?
What does ‘full-time support’ include after implementation: sender fixes, policy changes, report reviews, response times?
Where are aggregate and forensic reports stored? Forensic samples can hold personal data; get the region in writing.
Is the VMC certificate fee inside the quote, and who handles trademark checks with the certificate authority?
If Aquila I flattens or hosts SPF, who owns the record, and how is it handed back to your DNS if you leave?
Does your own mail gateway verify DMARC on inbound mail? Aquila I’s fourth phase assumes it does; confirm it.
Aquila I publishes no named case studies; ask for a reference customer that reached p=reject with its help.
What term, domain count and support level does the quote cover? Ask TechBag for it in INR with GST, BIMI as its own line.
List your domains and every service that sends as you, or let a TechBag advisor settle the managed scope, report hosting region and VMC fee with Aquila I and get the quote itemised in INR.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.