DMARC Mandate Drives Valimail Growth
Valimail
Google and Yahoo turned DMARC from a nice to have security setting into a must pass inbox requirement, which made Valimail's product move from specialist tooling to urgent operational software. Once bulk senders risked landing in spam or being rejected starting in February 2024, companies had to quickly inventory every service that sends mail on their behalf, fix SPF and DKIM alignment, and publish DMARC policies, which is exactly the messy workflow Valimail automates.
-
This was not just a security budget event, it was also a marketing and revenue protection event. The buyer is often the team that needs password resets, receipts, product alerts, and newsletters to reach the inbox, so Valimail benefits when failed authentication threatens both phishing exposure and email driven sales.
-
Valimail's wedge is simplicity at very large scale. It used free monitoring tools and its Microsoft relationship to surface every sender using a company domain, then upsold automation into Enforce and newer compliance products like Align, helping drive growth from about $21M ARR in 2023 to about $30M in 2024 and to roughly 65,000 customers.
-
The comparison set matters. Proofpoint and Mimecast sell broad email security suites with much higher revenue per customer, but many customers still keep Valimail for DMARC because this one job is tedious and easy to break. That makes Valimail look less like a full mail security replacement and more like the specialist layer enterprises keep even alongside incumbents.
The next phase is a shift from one time compliance scramble to ongoing sender identity management. As mailbox providers and standards bodies keep tightening rules, the winning vendors will be the ones that stay embedded in daily email operations, extend from DMARC into adjacent controls like BIMI and sender compliance, and become the system of record for who is allowed to send as a brand.