Launching soon

Never hit the SPF lookup limit again

grimDMARC Hosted SPF flattens every sending platform into a lookup-safe record and keeps it that way — automatically, as those platforms change their infrastructure.

Get early access

The problem: the SPF 10 DNS lookup limit

Every include: statement adds another DNS lookup, and SPF caps the total at 10. Cross that line — often just by adding one more marketing tool or notification service — and the entire record fails with a PermError. Not just the newest addition. All of it, including mail from services that were correctly configured.

The standard fix is flattening — resolving every include down to direct IP ranges, which don't count against the limit. But mail platforms rotate their IP ranges constantly, so a flattened record left alone quietly drifts out of date.

The solution: grimDMARC Hosted SPF

Your SPF record lives in a managed DNS zone that we keep current automatically. You get the lookup-count benefits of a flattened record without taking on the maintenance burden of one. Adding or removing a sending platform becomes a dashboard change, not a DNS edit.

Automatic flattening

Every include is resolved to direct IP ranges — zero lookups, same authorized senders.

Real-time updates

IP ranges are kept in sync as mail platforms change their infrastructure — no manual re-flattening.

Multi-tenant for MSPs

Manage SPF across every customer domain from one dashboard, without logging into each DNS provider.

Be first in line when Hosted SPF launches

We're onboarding early access customers ahead of general availability. Leave your email and we'll reach out when it's your turn.

Check your current SPF record →Read the SPF guide →