Glossary

Aggregate Reports (DMARC)

Written by Jack Zagorski | Oct 6, 2025 9:47:26 AM

What Are DMARC Aggregate Reports?

DMARC aggregate reports are XML files automatically generated by receiving mail servers that summarize how they processed and authenticated messages from your domain.

These reports provide daily insight into which servers are sending email on your behalf, how those messages performed against SPF and DKIM checks, and whether they passed or failed DMARC alignment.

They’re sent to the email address listed in your domain’s DMARC record under the rua= tag.

What DMARC Aggregate Reports Contain

Each aggregate report includes key details about your email traffic, such as:

  • The source IP address of the sending server
  • The count of messages sent from that source
  • The results of SPF and DKIM authentication
  • The alignment status with your domain’s DMARC policy
  • The disposition (none, quarantine, reject) applied by the receiving mail server

Because they’re sent in XML format, aggregate reports are not designed to be read manually. Instead, they’re typically parsed and visualized by a DMARC reporting tool or dashboard.

Why Aggregate Reports Are Crucial to Email Security and Deliverability

Aggregate reports are essential for understanding your email ecosystem. They reveal who is sending mail on your behalf, including legitimate third-party providers and potentially unauthorized sources.

By reviewing these reports, organizations can:

  • Detect spoofing and phishing attempts
  • Verify that SPF and DKIM are configured correctly
  • Monitor the impact of their DMARC enforcement policy
  • Identify misconfigured or unexpected senders before enforcement is tightened

Without aggregate reports, you’d have no visibility into how the rest of the world sees and authenticates your domain.

Aggregate Reports and DMARCeye

DMARCeye automatically collects, parses, and visualizes your DMARC aggregate reports so you don’t have to deal with raw XML files.

It turns complex data into clear, actionable insights, showing you which sources are authorized, which are failing authentication, and how your domain’s protection is evolving over time.

With DMARCeye, you can confidently move from monitoring to enforcement, backed by data that keeps your domain secure and your email reputation strong.

Start a free trial of DMARCeye today to protect your email domain.

To learn more about DMARC and DMARC-related terms, explore the DMARCeye Glossary.