Understanding SPF

SPF (Sender Policy Framework), an email authentication method, is used by email delivery services to prevent email spoofing. The problem is that SPF records flexible as email setups require because limited to a maximum of 10 DNS lookups. You probably did not know but a single service can use multiple DNS lookups and by combining services you may quickly exceed the limit.


Every Provider Adds Complexity

For example uses 4/10, use 8/10 records, Office 365 2/10, your web hosting provider adds additional records as does your HR software, appointment reminders or any other small tools that send emails on your behalf. If you or your marketing team rely on third-party service providers to deliver their email can quickly exceed this limit.


SPF Errors

The biggest problem with going over your SPF limit

You'll never know you did it. The way SPF works, once you exceed your DNS lookup limit, things start to break. The domain authentication or validation may break, or people may be able to spoof your domain for phishing. This means every email that needs a DNS lookup after that won't get the complete result. And since SPF comes with no error handling, you'll just have a bunch of emails that don't get delivered without any obvious warning, unless you know to look for it.


Flattened SPF with Monitoring

One solution to the SPF lookup limit is "SPF flattening." Flattening is simply replacing all the domains in the SPF record with their IP addresses, which eliminates the need for DNS lookups. The problem with this "manual" flattening is that email service providers may change or add to their IP addresses without telling you. Then your SPF record is inaccurate, which leads to the same email delivery problems. To do it right, manually flattening your SPF record requires that you constantly monitor your service providers for these changes. We will provide you with FREE SPF flattening and notifications for your domains.


Automatic SPF flattening is a better solution

What if you could update your SPF record automatically? Better yet, what if someone else automatically updated it for you and you never had to worry about it again? With AutoSPF you just add a single include in your SPF record that points to our server and we take care of the rest. AutoSPF always returns a flattened SPF record to public DNS queries. It's built on the real-time information held in the include statement. AutoSPF does all those things you'd expect from an SPF flattening service


With AutoSPF you get

Automatic flattening of all the domains in the include

Deduplication of netblocks of all the domains in the include

Real time SPF includes

Constant rescanning of provider includes

Change Notifications via email or webhook

Easily Authenticate Additional Networks

Authenticate New Networks

Automatic Includes

With AutoSPF you won't need to constantly modify your DNS records in order to update SPF. You can add new networks or authenticate new senders at the click of a button.

Here is a typical record, this has 14 of the 10 permitted lookups.

v=spf1 ip4: ip4: ip4: ip4: ip4: ~all

After we handle the automatic SPF management your records will look like this,

v=spf1 ~all

and it will use only 4 DNS lookups



Pay only for the service you need.

Rather than SPF flattening being a feature of a larger and more expensive suite of software we have designed AutoSPF to solve just one issue. There is no need to pay hundreds or even thousands more per month for features that you don't need.

Create Free Account

Usage Based Pricing

AutoSPF is billed based on consumption (DNS requests). The more emails that are sent by your domain the more DNS requests we receive to process your SPF record. Each lookup to our DNS server is considered one message, however, the recipient email server may only do one lookup and process dozens or hundreds of your emails. Which means that our numbers are going to be lower than your actual sending volume because of DNS caching on the remote email servers.

All accounts include 5,000 FREE lookups each month. Feel free to use these credit to test the system before buying, or if you are a smaller sender that is struggling with SPF compression or the service will be free for you forever.

When these credits are consumed there is a base account fee of $27 on all accounts until you reach 100,00 queries. For consumption over 100,000 queries, you will be billed the base account fee + usage. Using a graduated method of calculation.

As mentioned above each query is at loosely ties to one real email send by your servers, but more than likely it will represent 70% of your actual corporate email volume.

If you query 1 million and one lookups per month, (an approximate email volume of 1.4 million messages) this is how your bill is calculated.

1,000,001 units would cost $72.00004. (we round down on pennies)
First 5000 x $0.00 = $0.00.
Next 95000 x $0.00 + $27.00 = $27.00.
Next 900000 x $0.00005 = $45.00.
Next 1 x $0.00004 = $0.00004.

Do you require an Enterprise Service Level Agreement (SLA) that exceeds 99% uptime?
Please open a support ticket and we will contact you.