Field Notes

Guidance you can actually implement

Short, specific write-ups on the controls we spend most of our time fixing. No vendor pitches.

2026-08-12 · 6 min read

Your DMARC says p=none. Here is what that actually means.

A DMARC record with p=none publishes a policy but enforces nothing — spoofed mail claiming to be your domain is still delivered. What p=none does, why it exists, and how to move to enforcement safely.

Read →

Want this checked on your domain?

The exposure check reads your live DNS records and tells you where you stand in about four seconds.

Get a free security assessment → Run the free domain check →