DMARC.report ApS

Denmark · owned by ActiveCampaign (United States) · dmarc.report · 17 vendors

DMARC.report is a Danish company that provides DMARC (Domain-based Message Authentication, Reporting, and Conformance) monitoring and reporting services. Their platform helps organizations analyze DMARC data to protect their domains from email spoofing and phishing attacks.

Resilience scores

Disruption prediction

DMARC.report ApS has an estimated 17% probability of disruption in the next 6 months.

4 of DMARC.report ApS's 17 vendors monitored for disruptions.

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 17 sub-vendors.

Insights

Last updated 2026-09-13 · revision 13

17 direct vendors, 122 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

The company shows medium migration readiness, primarily driven by its nature as a modern SaaS platform (founded circa 2017), which typically implies a cloud-friendly architecture compared to legacy on-premise solutions. The usage of 20 external services suggests an API-driven or modular ecosystem, which can facilitate partial migrations, though it also introduces integration complexity. Financial growth supports the potential funding of migration efforts. However, readiness is heavily impacted by strict data residency and regulatory requirements (GDPR in Denmark/EU), which restricts data mobility to non-adequate jurisdictions. Furthermore, the absence of specific internal tech stack data (containerization, database types) and the 'Unknown' vendor lock-in status prevents a higher score, as technical debt or proprietary dependencies cannot be ruled out.

Compliance

4 in-scope frameworks identified; showing 3.

GDPR (source) — Assessment Required

GDPR is mandatory for all EU companies processing personal data. As a Danish company in email security, DMARC.report ApS almost certainly processes personal data (email addresses, domain information, potentially employee data).

GDPR is mandatory for all EU companies processing personal data. As a Danish company in email security, DMARC.report ApS almost certainly processes personal data (email addresses, domain information, potentially employee data). Non-compliance can result in fines up to 4% of annual turnover or €20M. High enforcement activity in Denmark through Datatilsynet makes this high risk.

ISO 27001 (source) — Assessment Required

ISO 27001 is voluntary but increasingly expected for cybersecurity companies. Email security providers often pursue this certification to demonstrate security maturity to enterprise customers.

ISO 27001 is voluntary but increasingly expected for cybersecurity companies. Email security providers often pursue this certification to demonstrate security maturity to enterprise customers. Risk is medium as it's not legally required but can impact business competitiveness.

NIS2 (source) — Assessment Required

NIS2 applies to digital service providers and ICT service management companies in the EU. Email security services could fall under 'digital service providers' category. If the company meets size thresholds (50+ employees or €10M+ turnover), NIS2 would apply.

NIS2 applies to digital service providers and ICT service management companies in the EU. Email security services could fall under 'digital service providers' category. If the company meets size thresholds (50+ employees or €10M+ turnover), NIS2 would apply. Risk is medium as enforcement is still developing and penalties are significant but less than GDPR.

Financials

Three-year financials

Financial Resilience Score: 8.5/10

The company is not just growing; it is highly profitable. An EBT margin of over 45% in its latest fiscal year is outstanding for any business and provides a significant cushion to absorb market shocks or invest in further growth. Based on its balance sheets, the company operates with no long-term debt. It is entirely financed by its equity, which is composed of initial capital and retained earnings. This lack of leverage makes it extremely resilient to interest rate fluctuations and credit market tightening. The impressive revenue growth appears to be organic and sustainable, funded by operational cash flow. This "bootstrapped" model avoids the pressures and dilution associated with venture capital, allowing for stable, long-term decision-making. The nature of a SaaS business (upfront subscription payments) combined with high profitability strongly implies healthy and positive operational cash flow, which is a key indicator of financial health.

Key strengths: High and Consistent Profitability, Zero Debt Financing, Strong Organic Growth, Positive Cash Flow

Risk factors: Scale: While financially sound, it remains a small enterprise. A significant market shift or the entry of a large, well-funded competitor could present a substantial threat., Key Person Risk: A company of this size may be highly dependent on its founder(s) and a small core team for its strategic direction and technical expertise.

Revenue by geography

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report