// Partner
Valimail
Founded
2015
HQ
San Francisco, CA
Employees
100+ (now DigiCert)
Total Funding
$83.5M
Status
Acquired by DigiCert (Sep 2025)
Website
VisitLeadership
Alexander Garcia-Tobar (CEO)、Peter Goldstein (CTO)
Last Round
Series C, $45M (2019)
Key Investors
// Overview
Valimail is the global leader in zero-trust email authentication, following DigiCert's acquisition of the company in September 2025, and automates DMARC, SPF, DKIM, and BIMI enforcement at enterprise scale. Its platform stops phishing and brand impersonation at the protocol level and reaches DMARC enforcement 4x faster than other vendors, and it is trusted by over 92,000 organizations worldwide, including major financial institutions and U.S. government agencies. The differentiators are concrete: patented Instant SPF resolves the SPF ten-lookup limit in a single lookup with no flattening, RUF+ identifies the owner of every sending service through recipient-side analysis, and Valimail is the only FedRAMP authorized DMARC vendor. Its CTO chairs the BIMI working group, co-chairs the IETF DMARC group, and co-authored the ARC standard, so the platform helps set the standards it implements.
// Capabilities
- --Automated DMARC Enforcement
- --Zero Trust Email Authentication
- --Recipient-Side Owner Discovery (RUF+)
- --Patented Instant SPF
- --Brand Impersonation Protection
- --BIMI and Verified Mark Certificates
- --Shadow IT Detection
- --Only FedRAMP Authorized DMARC Vendor
// Products
Valimail Monitor
Free DMARC visibility and reporting. Converts raw IP data into named sending services, and RUF+ identifies the internal owner of each one.
Valimail Enforce
Automated DMARC enforcement with patented Instant SPF technology. Overcomes the 10 DNS lookup limit.
BIMI & Verified Mark Certificate
BIMI setup and Verified Mark Certificate management, offered separately. Brand logos displayed in authenticated emails once DMARC is enforced.
// Use Cases
Click a use case to see matching deployments below
// Customers
// Target Buyers
Who Valimail sells to
Valimail fits the buyer segments below. StrategyCore provides the local technical support, Japanese-language engagement, and commercial operations for both end-user customers and channel partners.
Large Enterprise
primaryEnterprises with recognizable brands protecting their domains from impersonation, particularly financial services, retail, and consumer brands where trust in customer communications is business-critical.
SaaS Companies
secondarySaaS brands protecting their sending domains from impersonation, particularly those with high-volume transactional email where DMARC enforcement protects customer trust.
SMEs / Mid market
secondaryGrowing brands needing to reach full DMARC enforcement quickly without building in-house email authentication expertise.
Government & Public Sector
primaryGovernment agencies and public institutions requiring FedRAMP-authorized DMARC enforcement to protect citizen communications and comply with federal email authentication mandates.
System Integrators
secondarySecurity integrators including DMARC automation as part of broader email security and brand protection engagements.
OEMs (Embedded)
not a focusValimail is deployed as a managed DMARC platform at the domain owner level, not embedded inside other products.
MSSPs
primaryManaged security providers offering DMARC enforcement as a service to multiple customers, using Valimail as the automated policy management engine underneath.
Distribution Partners
secondaryJapanese security distributors carrying Valimail as part of their email security and brand protection portfolio.
// Case Studies
Case Studies
Case study content is aggregated from publicly available vendor sources. All trademarks and customer attributions belong to the original vendors.
// Competitive Landscape
How Valimail compares
Valimail operates in the email authentication and anti-phishing category, specifically the DMARC enforcement segment. The decision point in this category is usually between DMARC monitoring tools (which show you what is happening), manual DMARC policy management, and automated enforcement platforms. Valimail is positioned in the automated enforcement segment, with particular strength in the protocol-level mechanics of SPF, DKIM, DMARC, and BIMI.
| Capability | Valimail | Proofpoint | dmarcian | Agari (Fortra) | EasyDMARC | Mimecast |
|---|---|---|---|---|---|---|
| Specialized DMARC platform (not a broader suite) | ● | — | ● | ● | ● | — |
| ML-based sender behavior and anomaly detection | ● | ● | ○ | ● | ○ | ● |
| Protects automated system email (CRM, data platforms, LLM agents) | ● | ● | ● | ● | ● | ● |
| Feeds SIEM / SOAR pipelines | ● | ● | ○ | ● | ○ | ● |
| Automated DMARC policy enforcement | ● | ○ | ○ | ● | ○ | ○ |
| Instant SPF: single lookup, no flattening (removes the 10-lookup limit) | ● | — | — | — | — | — |
| Recipient-side service-owner discovery (RUF+, patented) | ● | — | — | — | — | — |
| BIMI and authenticated brand logos | ● | ● | ● | ● | ● | ● |
| FedRAMP authorized | ● | ● | — | ○ | — | ● |
// Competitor Reference
Proofpoint
Email security suiteComprehensive email security and threat protection platform.
dmarcian
DMARC servicesDMARC reporting and consulting.
Agari (HelpSystems Fortra)
DMARC and email securityDMARC and email trust platform, now part of Fortra.
EasyDMARC
DMARC reportingDMARC monitoring and reporting service.
Mimecast
Email securityEmail security and resilience platform.
Abnormal Security
AI email securityAI-based email threat detection for advanced social engineering attacks.
Comparisons reflect category positioning based on publicly available information. Vendor capabilities evolve; contact us for current detail. All trademarks belong to their respective owners.
// Benchmarks
Valimail by the numbers
// Sovereign in Japan
Authenticate email without exporting personal data.
Valimail shows exactly who sends email as your domain and enforces DMARC, through a connector that holds no personal data.
Sovereign data, sovereign AI, sovereign security.
See the sovereignty approachFull domain sending visibility and enforced DMARC.
Mailbox Connector holds zero personal data.
SOC 2 and FedRAMP aligned, consistent with APPI and GDPR.
// Latest Videos
// Recent News
Do you work with Valimail?
If email authentication is part of what you sell, we can bring it to Japanese organizations enforcing DMARC and handle the local go-to-market end to end.