parsedmarc
Python tool that parses DMARC aggregate and forensic reports and ships them to Elasticsearch, Splunk, or Postgres.
Technical Architecture & Overview
parsedmarc collects DMARC aggregate (rua) and failure (ruf) reports from a mailbox over IMAP, Microsoft Graph, or the Gmail API, parses them, and sends results to Elasticsearch, OpenSearch, Splunk, PostgreSQL, Kafka, S3, and other outputs. Prebuilt Kibana dashboards cover aggregate and failure reports. TLS-RPT reports are supported as well. The project is maintained by one developer.
Targeted Technical Use Cases
Self-hosted DMARC reporting as an alternative to commercial DMARC platforms.
Evaluation & Trade-offs
Core Strengths
- +Full control over report data in your own storage.
- +Ready-made dashboards for the common questions.
- +Handles both aggregate and forensic report formats.
Trade-Offs & Limitations
- -Storage and email ingestion components are self-operated.
- -Maintained by a single developer.
Defensive Security Application
Monitoring domain spoofing through DMARC alignment data and driving enforcement policy changes.
Frequently Asked Questions
What is parsedmarc?→
parsedmarc collects DMARC aggregate (rua) and failure (ruf) reports from a mailbox over IMAP, Microsoft Graph, or the Gmail API, parses them, and sends results to Elasticsearch, OpenSearch, Splunk, PostgreSQL, Kafka, S3, and other outputs. Prebuilt Kibana dashboards cover aggregate and failure reports. TLS-RPT reports are supported as well. The project is maintained by one developer.
What is parsedmarc used for?→
Self-hosted DMARC reporting as an alternative to commercial DMARC platforms.
What are the strengths of parsedmarc?→
- +Full control over report data in your own storage.
- +Ready-made dashboards for the common questions.
- +Handles both aggregate and forensic report formats.
What are the limitations of parsedmarc?→
- +Storage and email ingestion components are self-operated.
- +Maintained by a single developer.
How is parsedmarc used defensively?→
Monitoring domain spoofing through DMARC alignment data and driving enforcement policy changes.