// Partner
Valimail
Founded
2015
HQ
San Francisco, CA
Employees
100+ (now DigiCert)
Total Funding
$83.5M
Status
Acquired by DigiCert (Sep 2025)
Website
VisitLeadership
Alexander Garcia-Tobar (CEO)、Peter Goldstein (CTO)
Last Round
Series C, $45M (2019)
Key Investors
// Overview
Valimail Enforce automates email authentication and DMARC management. It identifies legitimate sending services and helps an organisation move from monitoring to a policy that asks receivers to quarantine or reject unauthenticated mail using its domains. Our Japanese pre-sales team supports sender investigation, SPF and DKIM checks and policy testing. StrategyCore handles licensing, deployment and post-sales technical support within the agreed scope. Receivers decide how to apply DMARC, while lookalike domains, display-name impersonation and compromised accounts require other controls.
// Capabilities
- --Automated DMARC Enforcement
- --Zero Trust Email Authentication
- --Sending-service and ownership investigation
- --Patented Instant SPF
- --Brand Impersonation Protection
- --BIMI and Verified Mark Certificates
- --Shadow IT Detection
- --Enforce service certifications
// Products
Valimail Monitor
DMARC aggregate reporting and sender visibility. Confirm the plan and prerequisites for ownership investigation or mailbox connectors separately.
Valimail Enforce
Manage sending-service authentication and DMARC policy. Instant SPF can assist SPF configuration, but the SPF standard’s DNS lookup limit still applies.
BIMI & Verified Mark Certificate
Support for BIMI configuration and certificate requirements. Logo display depends on the receiving service, authentication results and its certificate rules.
// Use Cases
Click a use case to see matching deployments below
// Customers, partners and environments
// Routes to market
Buyer groups and sales partners for Valimail
Valimail serves domain owners and the partners that manage their email authentication. StrategyCore develops Japanese opportunities by identifying sending services, the teams responsible for DNS and mail delivery, and the migration work required before a DMARC policy change.
Large Enterprise
initial focusEnterprises with recognizable brands protecting their domains from impersonation, particularly financial services, retail, and consumer brands where trust in customer communications is business-critical.
SaaS Companies
application-dependentSaaS businesses authenticating the domains used for notifications and transactional mail. Verify legitimate senders and delivery before changing DMARC policy.
SMEs / Mid market
application-dependentGrowing organisations needing help to identify legitimate senders, configure authentication and operate DMARC policy. Confirm the estate, staff responsibilities and migration work before setting dates.
Government & Public Sector
initial focusPublic bodies protecting the domains used for official communications. US federal references demonstrate one procurement context; Japanese prospects need evaluation against their own procurement and security requirements.
System Integrators
application-dependentSecurity integrators including DMARC automation as part of broader email security and brand protection engagements.
OEMs (Embedded)
specialist fitValimail is offered as a domain-owner service. Confirm available integration functions, licensing rights and support if it will form part of another service.
MSSPs
initial focusManaged security providers offering DMARC enforcement as a service to multiple customers, using Valimail as the automated policy management engine underneath.
Distribution Partners
application-dependentJapanese security distributors carrying Valimail as part of their email security and brand protection portfolio.
// Case Studies
Case Studies
Case study content is aggregated from publicly available vendor sources. All trademarks and customer attributions belong to the original vendors.
// Competitive Landscape
How Valimail compares
Valimail helps teams identify sending services, manage SPF and DKIM configuration, and introduce DMARC policy changes. Compare sender discovery, DNS work, reporting and support; test legitimate mail before requesting quarantine or rejection.
| Capability | Valimail | Proofpoint | dmarcian | Agari (Fortra) | EasyDMARC | Mimecast |
|---|---|---|---|---|---|---|
| Specialized DMARC platform (not a broader suite) | ● | — | ● | ● | ● | — |
| ML-based sender behavior and anomaly detection | ● | ● | ○ | ● | ○ | ● |
| Protects automated system email (CRM, data platforms, LLM agents) | ● | ● | ● | ● | ● | ● |
| Feeds SIEM / SOAR pipelines | ● | ● | ○ | ● | ○ | ● |
| Automated DMARC policy enforcement | ● | ○ | ○ | ● | ○ | ○ |
| Instant SPF lookup management | ● | — | — | — | — | — |
| Recipient-side service-owner discovery (RUF+, patented) | ● | — | — | — | — | — |
| BIMI and authenticated brand logos | ● | ● | ● | ● | ● | ● |
| FedRAMP authorized | ● | ● | — | ○ | — | ● |
// Competitor Reference
Proofpoint
Email security suiteComprehensive email security and threat protection platform.
dmarcian
DMARC servicesDMARC reporting and consulting.
Agari (HelpSystems Fortra)
DMARC and email securityDMARC and email trust platform, now part of Fortra.
EasyDMARC
DMARC reportingDMARC monitoring and reporting service.
Mimecast
Email securityEmail security and resilience platform.
Abnormal Security
AI email securityAI-based email threat detection for advanced social engineering attacks.
This table summarises product positioning from public vendor information. Confirm the edition, supported features and deployment requirements for your evaluation. Trademarks belong to their respective owners.
// Benchmarks
Valimail by the numbers
G2 #1 Ranking
15 consecutive quarters
Spring 2026 G2 report, as reported by Valimail; this is a dated ranking.
Valimail G2 2026Enforcement Speed
Deployment-specific
Time to policy change depends on sender discovery, DNS access, alignment and legitimate-mail testing.
Valimail// Hosting and data access
Review sending services and connector permissions.
Valimail helps identify sending services and manage domain authentication. Confirm which reports and integrations are used, what they collect and how long data is retained.
Hosting, data access and operating responsibilities for the proposed deployment.
See the sovereignty approachValidate legitimate senders before changing DMARC policy.
Review the exact mailbox connector, header data, tenant permissions and retention.
Confirm the current service certifications and contractual security terms for the proposed scope.
// Latest Videos
// Recent News
Develop Japanese accounts for email authentication.
Our team handles Japanese product demonstrations, technical discussions and local sales partner development. We work with the prospect on legitimate sending services, domain authentication and support requirements.