Proofpoint EFD Commercial Unlimited

Streamlines your DMARC implementation

Ease of use

Seamlessly fits into existing workflows without disruption.

Dedicated consultants and expert guidance

  • To help you set up email authentication, Proofpoint creates a project plan for you. The plan has guided workflows that simplify the setup process. Our consultants help you through every step of the plan. We work with you to identify all your legitimate senders—including third parties and shadow IT—to make sure they authenticate properly. We also analyze your email environment to help you prioritize tasks based on your needs, such as email volume and top senders.

Hosted authentication services

  • Email Fraud Defense includes Proofpoint’s Hosted SPF, Hosted DKIM and Hosted DMARC services. These hosted services help you set up and manage policies for Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) and DMARC. They are also geographically distributed, fault-tolerant services that ensure reliability.

Hosted SPF

  • Eases bulk management of multiple domains that use the same sending infrastructure
  • Improves SPF security by obfuscating your sending infrastructure
  • Updates records in real time, with proper syntax validation
  • Reduces the work of updating SPF records
  • Helps you overcome the 10 DNS lookup limit imposed by SPF

Hosted DKIM

  • Allows simple import of DKIM selectors and public keys
  • Supports DNS Security Extensions (DNSSEC)
  • Provides flexible hosting options for DKIM selectors (delegated or non-delegated)
  • Simplifies configuration and management of DKIM selectors and keys

Hosted DMARC

  • Allows simple import of existing DMARC records
  • Supports DNSSEC
  • Simplifies configuration and management of DMARC records for your domains

Comprehensive brand protection

To protect your brand, Email Fraud Defense stops fraudulent emails from being sent using your trusted domains.

Identify lookalikes of your domains

  • The Proofpoint Takedown add-on reduces exposure of your consumers, partners and employees to lookalike domains. You can pursue removal of a malicious domain with the domain registrar or the hosting, content delivery network (CDN) or email provider. You can also export domains to be blocked at the Proofpoint email gateway.
  • Email Fraud Defense uses domain registration information from Proofpoint Domain Discover. It detects domains posing as your brand in email attacks or on phishing websites. Proofpoint analyzes millions of domains and connects registration data with our own data on email activity and attacks. We show you suspicious domains and how attackers are spoofing your brand. We also alert you when suspicious domains become active.

360-degree visibility across your email ecosystem

  • Email Fraud Defense shows all emails sent using your trusted domains. These include emails to consumer mailboxes, business gateways, and your own gateway.
  • Email Fraud Defense gives you actionable insights and recommendations. You don’t have to worry about failing DMARC or blocking valid emails while stopping attackers.
  • Our dashboard shows which of your domains attackers have tried to hijack and the abuse rate of each one. It shows authorized senders and their DMARC records as well as your policies and pass rates for SPF, DKIM and DMARC.

Visibility of supplier risks

Email Fraud Defense goes beyond DMARC setup to also show your supplier risks. Nexus Supplier Risk Explorer identifies your suppliers, checks their DMARC records and shows their risks. Our product shows you messages delivered from lookalike domains. By prioritizing alerts based on risk levels, we help you to focus on the most critical incidents.

Integration with Proofpoint Email Gateway

  • Email Fraud Defense works with the Proofpoint email gateway to enforce DMARC on inbound traffic. It helps you verify the DMARC reputation of a domain, so your gateway doesn’t block valid email that failed DMARC. It also helps you create override policies for valid email without reducing your security posture

DMARC visibility for Microsoft 365

  • If you use Microsoft 365 with your mail exchange (MX) records pointed to Microsoft’s inbound servers, Email Fraud Defense can still show the DMARC compliance of your domains. This visibility helps you to enforce DMARC on inbound traffic from your domains with confidence.