CertaDNS

Pricing

Email authentication starts free and needs nothing moved. Every price below is published — there is no contact-sales floor until Enterprise, and nothing here needs a call to find out.

Annual billing works out to roughly one month free.

Email Authentication

We host the records. You point _dmarc, your DKIM selector and the rest at us with a CNAME, or delegate a subdomain — your nameservers stay exactly where they are.

Free is a real tier, not a trial: one domain, hosted DMARC and BIMI, and your aggregate and forensic reports processed and readable.

Free

Free

Everything needed to see who is sending as you.

  • 1 domain
  • 1 user
  • 14 days of data history
  • Hosted DMARC and BIMI
  • RUA and RUF report processing
  • DMARC geolocation report
  • Alert monitoring
  • Two-factor authentication
Start free

Plus

$12/mo

Publish every record from here, and watch delivery as well as auth.

  • 2 domains
  • 1 user
  • 3 months of data history
  • Hosted DMARC, DKIM, MTA-STS, TLS-RPT and BIMI
  • RUA and RUF report processing
  • DMARC geolocation report
  • Scheduled reports by email
  • TLS reports
  • Alert monitoring
  • Two-factor authentication
Choose Plus

Premium

Most complete
$70/mo

The whole record set, your whole team.

  • 5 domains
  • Unlimited users
  • 1 year of data history
  • Hosted DMARC, SPF, DKIM, MTA-STS, TLS-RPT and BIMI
  • RUA and RUF report processing
  • DMARC geolocation report
  • Scheduled reports by email
  • TLS reports
  • Permission and group management
  • Alert monitoring
  • Two-factor authentication
  • Email support
Choose Premium

Enterprise

Contact sales

Every domain you own, wired into what you already run.

  • Unlimited domains
  • Unlimited users
  • 3 years of data history
  • Hosted DMARC, SPF, DKIM, MTA-STS, TLS-RPT and BIMI
  • RUA and RUF report processing
  • DMARC geolocation report
  • Scheduled and advanced reports by email
  • DMARC report export (RUA/RUF)
  • Brand protection included
  • Custom alert rules, Slack and Teams, SIEM
  • Permission and group management
  • API access and audit logs
  • Dedicated support
Talk to us

Want the detail behind each line? What email authentication does and why it matters.

Add-ons

Three things are sold separately, because most accounts do not need them and charging everyone for them would mean charging most people for nothing. Each one is included at the tier that does.

Hosted SPF

$10/mo

One flat record you never have to edit again. We resolve your senders at query time, so your SPF stays inside the ten-lookup limit however many providers you add.

Included with Premium and Enterprise. One purchase covers every domain your plan allows.

Brand Monitoring

$29 / domain/mo

Catch look-alike registrations and new certificates for domains that resemble yours, before they are used against your customers.

Included with Enterprise.

Managed DNS

$2 / domain/mo

Host the zone itself — authoritative DNS on four servers across two independent networks, with one-click DNSSEC, record management, query analytics and health-check failover.

First 14 days free on your first subscription

A separate product line. Email authentication does not need it.

Dynamic DNS

A different shape of product, so a different ladder: here the plan is what you buy, and it is priced by how many hostnames you need. The free tier is genuinely free — five hostnames, no expiry, no monthly email asking you to confirm you still want them.

Free

Free
  • 5 hostnames, never expire
  • Basic URL forwarding
  • Community support
Start free

Pro

$10/mo
  • 100 hostnames
  • Premium trusted domains
  • Wildcard + web forwarding
  • DDNS API access
  • No ads or captcha
Choose

Elite

$25/mo
  • 500 hostnames
  • Premium trusted domains
  • Vanity (white-label) nameservers
  • Priority support
Choose

New to dynamic DNS? What it is and when you need it.

Not sure what you need yet?

Check what your domain is publishing today. The tools are free, need no account, and read nothing but public DNS.

Pricing questions

Do I have to move my DNS to CertaDNS?+

No. Email Authentication works on whatever DNS you run today — Cloudflare, Route 53, your registrar. You point the authentication records at us with CNAMEs, or delegate a subdomain, and we publish and maintain what sits behind them. Managed DNS is the one product that needs the domain delegated to us, because hosting the zone is the product.

What does the Free tier actually include?+

One domain, one user, hosted DMARC and BIMI, your aggregate and forensic reports processed and readable for 14 days, the geolocation breakdown, and two-factor authentication on your account. It does not expire and it does not ask for a card.

Is BIMI extra?+

No. BIMI is included at every tier, including Free. It used to be a $4-per-domain add-on; that was the wrong call, because a logo in the inbox is the most visible thing we do and pricing it separately kept it away from the people most likely to talk about it. A Verified Mark Certificate, if you choose to get one, is billed by the issuing authority rather than by us.

Why is Hosted SPF an add-on below Premium?+

SPF is the one record we cannot publish once and leave alone. Flattening resolves every sender you list, on every query, against our resolver fleet — that is ongoing work rather than a record we write. Premium and Enterprise include it. Below those it is $10 a month, flat, covering every domain your tier allows.

How many users do I get?+

Free and Plus are single-user. Premium and Enterprise include unlimited users, with permission and group management — there are no seats to buy and no per-user price.

What happens to my report history if I downgrade?+

Nothing is deleted at the moment you downgrade, but you can only read back as far as your tier allows: 14 days on Free, 3 months on Plus, a year on Premium, three years on Enterprise. Upgrading widens the window again over the data we still hold.

How does the 14-day trial work?+

Managed DNS starts with 14 days free. A card is required to start, nothing is charged until the trial ends, and you can cancel before then at no cost. It applies once per account, on your first subscription. Anything else in the same cart rides along on the same trial, because Stripe applies a trial to the subscription rather than to each line item.

Why is there no trial on Dynamic DNS?+

Different product, different abuse profile. A free dynamic hostname can be spun up and abandoned in minutes, so a trial there mostly buys churn. Dynamic DNS has a genuinely free tier instead, with five hostnames that never expire.

What happens if I add a domain mid-month?+

Your tier covers a number of domains, so adding one inside that number costs nothing extra. Going past it means moving up a tier, prorated by the payment processor from the day you change. Managed DNS and Brand Monitoring are billed per domain and are prorated the same way.

Is the free Dynamic DNS tier time-limited?+

No. Five hostnames, no expiry, and no confirmation email every 30 days. If you stop logging in, your hostnames keep resolving.

Do you offer volume or committed pricing?+

For larger footprints, yes — that is what Enterprise covers, along with unlimited domains, three years of history, SIEM and chat integrations, API access, audit logs, invoicing and a custom SLA. Below that, the published price is the price.

Comparing us against another vendor? Side-by-side comparisons, including where they beat us.