Keep your domain healthy. Let your emails land in the inbox.
Sojka watches your domain's whole email trust posture - DMARC reports, DNS records, blacklists - and pushes an alert to your phone the moment something changes. No XML, no jargon, no enterprise-suite pricing.
One watcher for everything your email trust depends on.
DMARC reports, decoded
Aggregate reports parsed continuously. Every sending source classified - your CRM, your newsletter tool, or an attacker - in plain language.
DNS drift detection
SPF, DKIM, DMARC and MX polled every 15 minutes (DKIM as soon as a selector is known). Alerts on change - a record that broke yesterday, not noise about old imperfections.
Blocklist monitoring
Your sending IPs checked against tiered public DNSBLs, severity matched to each list's real-world impact. Delisting guidance included.
Send-us-a-test-email check
Send one message from any system to a one-time address and get an instant per-source verdict: correctly configured, or exactly what to fix.
Readiness advisor
A health score out of 100, plus the exact step between you and p=reject. Tighten policy when the data says it's safe - never break your own mail.
Native iOS app + push
The only DMARC monitor that lives on your phone. Critical signals arrive as push notifications - triage, acknowledge and act without opening a laptop.
Each of these is invisible until it costs you.
Unknown senders with real volume are flagged with evidence - IP, ASN, message counts - and pushed to your phone. At p=reject, receivers drop the spoof entirely.
How to close this →Your sending IPs are checked against tiered public DNSBLs every 6 hours - hourly while listed - with delisting guidance per list. You know before your customers do.
How to close this →A deleted DMARC record, an SPF pushed over the 10-lookup limit, a revoked DKIM key - drift detection catches the change within 15 minutes, not at the next incident.
How to close this →Disposition tracking across all receivers shows delivered / quarantined / rejected per source, so a misconfigured tool surfaces as a trend - not a support ticket.
How to close this →p=none means spoofing is reported but still delivered. The readiness advisor lists the exact blockers and tells you when quarantine - then reject - is safe.
How to close this →Every legitimate source is verified aligned first - including a live test email per system - so tightening to reject never quarantines your own newsletter.
How to close this →The common thread: hygiene. Why a well-kept sending domain collects fewer spam reports and a better reputation →
Doing it by hand vs. enterprise suites vs. Sojka.
"Enterprise suite" reflects typical published pricing and feature tiers of established DMARC platforms as of mid-2026. Some offer more (forensic reports, managed onboarding) - if you need that, buy that.
Priced for the domains everyone else ignores.
Flat pricing, no per-domain surprises. Running a lot of domains or reselling? Write to us - it stays reasonable.
Why DMARC - and what to publish on domains that never send.
Why DMARC is worth having before anything goes wrong
Anyone can put your domain in the From header of an email. DMARC is how receivers learn what to do about it - and how you learn it is happening at all.
The domain that sends no mail still needs DMARC
Parked and defensive domains are the easiest to spoof precisely because nobody watches them. Three records lock one down - here they are, with the reasoning.