CISO Tribune

Company record · security vendor

Valimail

CISO Tribune company record: Valimail, security vendor (Email authentication and DMARC)

Where Valimail appears on the record (8)

Every page on CISO Tribune and its network that carries this company, 8 in all.

In the vendor directory

What the company sells

Valimail is a DMARC and email authentication company that sells Monitor, a free tool for domain visibility, Enforce, a tool for continuous DMARC enforcement, and Amplify, an add-on for showing a brand logo in the inbox.

Valimail describes itself as a Digicert company. Valimail was founded by Alexander Garcia-Tobar and Peter Goldstein, and pioneered automated DMARC in 2015. Valimail operates as a dedicated DigiCert business unit. Valimail says that as part of DigiCert it extends its mission across the digital trust ecosystem with expertise in certificates, encryption, and DNS infrastructure.

Valimail says email is the primary attack surface and that attackers who can impersonate a domain do not need to breach systems. Valimail says it helps organizations of all sizes protect their brands, prevent phishing, and strengthen long-term email security. Valimail says it helps organizations move beyond basic enforcement by stabilizing authentication, aligning with mailbox provider requirements, and maintaining visibility into identity risk. Since 2015, Valimail says its patented technology has helped over 30,000 organizations reach continuous DMARC enforcement.

Monitor is the free product. Monitor gives visibility into the enforcement status of all sending domains, including which domains are passing and failing DMARC, aligned SPF and DKIM, and overall disposition. Monitor identifies thousands of sending services, which lets users distinguish legitimate senders from bad actors without working through IP addresses one by one. Monitor gives direct access to view unidentified ISPs, open routers, and unsecured hacked servers. Monitor checks an email-sending service against the DKIM, SPF, and DMARC requirements of Google, Microsoft, and Yahoo. Monitor lets users upload a logo and see what BIMI could look like in the inbox. Monitor sends a weekly DMARC report showing which domains are passing and failing. Valimail says a DMARC record can be pointed to the Valimail Cloud in 5 minutes or less.

Enforce is the product for acting on what Monitor shows. Valimail says Enforce uses automation to give continuous DMARC protection with auto-configuration, updates, and alerts. Enforce automates email authentication, enforces policy decisions, and provides real-time reporting and analytics. Enforce includes one-click authorization of pre-configured sending services. Valimail describes Instant SPF as patented software for overcoming SPF limits. Valimail says Enforce is SOC 2, PCI, and GDPR compliant, and describes Enforce as the only FEDRAMP-certified DMARC provider.

Amplify is an add-on product for Enforce customers that controls how a logo appears in a customer's inbox. Amplify fast tracks BIMI implementation for companies already at DMARC enforcement. Valimail says Amplify streamlines acquiring and managing a Verified Mark Certificate or Common Mark Certificate. Valimail helps determine which of the two certificates is right for a customer. Amplify assigns the right brand assets to the right domains and swaps them in and out as needed. Valimail says emails with a logo beside them get opened 20% more, and that branding emails requires reaching DMARC enforcement first.

Valimail names Yelp, Mailchimp, Twilio, and Uber as companies that recommend Valimail to their customers.[1][7][8][9][10][11]

Headquarters
San Francisco, United States
Founded
2015[2][5][6]
Ownership
Owned by DigiCert since 2025[3][4]
CISO on record
Not yet on our record. Send a verified source

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

  • Monitor[1][5][7][8]

    A free tool that shows the enforcement status of sending domains.

    Monitor shows the enforcement status of all sending domains, including which domains are passing and failing DMARC, aligned SPF and DKIM, and overall disposition. Monitor identifies thousands of sending services.

  • Enforce[1][5][7][9][10]

    Software that uses automation to give continuous DMARC protection.

    Enforce automates email authentication, enforces policy decisions, and provides real-time reporting and analytics. Enforce includes one-click authorization of pre-configured sending services. Valimail describes Instant SPF as patented software for overcoming SPF limits.

  • Amplify[5][10]

    An add-on for Enforce customers that controls how a logo appears in the inbox.

    Amplify is an add-on product for Enforce customers that controls how a logo appears in a customer's inbox. Amplify fast tracks BIMI implementation for companies already at DMARC enforcement. Amplify streamlines acquiring and managing a Verified Mark Certificate or Common Mark Certificate.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Valimail's categories, then alphabetical. A list from the record, never a ranking.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

  • G2 · no rating shown · 698 reviews[4]seen November 3, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

  1. [1]valimail.comValimail · valimail.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
  2. [2]Valimail opens denver innovation and engineering hubValimail · valimail.com · published October 16, 2019 · Tier A: the company, a regulator or a filing
  3. [3]Digicert acquires valimail global leader in email authenticationDigiCert · digicert.com · published September 16, 2025 · Tier A: the company, a regulator or a filing
  4. [4]Valimail Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 29, 2026 · Tier C
  5. [5]Product OverviewValimail · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
  6. [6]About Us | ValimailValimail · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
  7. [7]Free DMARC Monitoring | Try Monitor Today | ValimailValimail · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
  8. [8]Try Monitor Free | ValimailValimail · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
  9. [9]Enforce | ValimailValimail · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
  10. [10]Amplify | ValimailValimail · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
  11. [11]Success Stories | ValimailValimail · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing

Last verified November 2, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 3, 2026 from the references above.

Work for Valimail? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Valimail. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Valimail

What does Valimail sell?
Valimail sells Monitor, Enforce and Amplify. Monitor: A free tool that shows the enforcement status of sending domains. Enforce: Software that uses automation to give continuous DMARC protection. Amplify: An add-on for Enforce customers that controls how a logo appears in the inbox.
Who does Valimail fit?
From its own pages, Valimail sells mainly to organizations of all sizes that want to protect their brands and prevent phishing. Valimail positions Monitor, which is free, for organizations that want visibility into the enforcement status of their sending domains. Valimail positions Enforce for organizations that want continuous DMARC protection, and describes Enforce as FEDRAMP-certified. Valimail positions Amplify for Enforce customers that are already at DMARC enforcement and want their logo in the inbox.
How does CISO Tribune file Valimail?
CISO Tribune files Valimail under Email authentication and DMARC.
Where is Valimail headquartered?
Valimail is headquartered in San Francisco, United States.
When was Valimail founded?
Valimail was founded in 2015.
Who owns Valimail?
Valimail is owned by DigiCert, which acquired it in 2025.

Related guides