Consolidation Turns DMARC Into Feature

Consolidation is turning DMARC from a standalone niche into a feature inside broader email security suites. Fortra bought Agari in May 2021 to add phishing defense and DMARC brand protection to its larger security portfolio, and Cofense bought Cyberfish in April 2021 to pair automated inbox protection with its phishing detection and response stack. That matters for Valimail because the company is competing less with single product vendors and more with bundled platforms, even as new sender rules push more companies to adopt authentication fast.

• Agari was not just another anti phishing tool. It helped create DMARC and sold brand protection products built on it. Once inside Fortra, that capability sat next to adjacent tools like threat intelligence and data security, which made DMARC easier to sell as part of a larger security budget.
  2 fortra 3 fortra
• Cyberfish added cloud native filtering and machine learning to Cofense’s platform. In practice, that meant Cofense could cover more of the email workflow, from blocking suspicious messages before they reach the inbox to handling employee reported phish after delivery.
  4 businesswire 6 timesofisrael
• At the same time, Google tightened sender requirements starting February 2024 for bulk senders to Gmail, including email authentication. That created a larger pool of companies that needed DMARC help quickly, which made scaled platforms and specialized automation vendors both more attractive acquisition targets.
  5 google 7 sacra

The next phase is likely to split the market in two. Large security platforms will keep absorbing basic authentication and phishing features into suites, while specialists that automate messy DNS changes, vendor discovery, and policy rollout will stay valuable where enterprises need faster deployment and less manual work.