Red Sift Due Diligence
Run due diligence on Red Sift: check compliance and get alerts when suppliers or ownership change.
United Kingdom · owned by Independent (United Kingdom) · www.ondmarc.com · 27 vendors
Red Sift is a global cybersecurity company that operates OnDMARC, an award-winning email authentication platform helping organizations achieve DMARC enforcement to stop phishing, spoofing, and business email compromise (BEC) attacks. The platform provides visibility into domain email security posture, automates SPF/DKIM/DMARC/BIMI configuration, and includes tools such as DNS Guardian and Dynamic SPF to protect against a broad range of email-based threats. Trusted by over 1,200 organizations worldwide, Red Sift also offers complementary products covering attack surface management, certificate monitoring, and brand protection.
Resilience scores
- Digital Sovereignty: 4
- Digital Resilience: 9
- Financial Resilience: 7
Technology vendors
- Customer.io — Technology — United States
- Docker, Inc. — Technology — United States
- Sophos Ltd. — Cybersecurity — United Kingdom
- and 29 more
Services catalogue
5 services in catalogue across 3 categories; runs on 27 sub-vendors.
- OnDMARC
- Smart DMARC
- Personal Data Processing
Insights
Last updated 2026-08-15 · revision 3
27 direct vendors, 248 subvendors
Direct vendors by controlling owner country (sample)
- Denmark: 1
- Australia: 1
- United States: 21
Subvendors by controlling owner country (sample)
- Canada: 8
- Serbia: 1
- Singapore: 1
Compliance
7 in-scope frameworks identified; showing 3.
GDPR (source) — Evidence found
Evidence: https://redsift.com/legal/privacy-policy, https://redsift.com/legal/cookie-policy, https://redsift.hypercomply.io/, https://redsift.com/about-us, https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
PCI DSS (source) — No public evidence
Evidence: https://redsift.com/pulse-platform/ondmarc, https://www.pcisecuritystandards.org/document_library/
UK Network and Information Systems — No public evidence
Evidence: https://www.legislation.gov.uk/uksi/2018/506/contents/made, https://ico.org.uk/for-organisations/the-guide-to-nis/, https://redsift.com/about-us
Financials
Three-year financials
- null:
Financial Resilience Score: 7/10
Red Sift is a well-capitalised mid-stage venture-backed UK cybersecurity SaaS scale-up. The company raised a US $54 million Series B in January 2022 led by Highland Europe, with participation from Sands Capital, MMC Ventures, Oxford Capital and Wing VC, supplemented by venture debt. This provided multi-year runway and a high-quality investor syndicate capable of supporting follow-on funding. The recurring-revenue SaaS model across OnDMARC, Brand Trust, Certificates and ASM products provides predictable ARR that investors and lenders favour. The company benefits from strong market tailwinds including Google/Yahoo/Microsoft bulk-sender enforcement (2024-25), PCI DSS 4.0.1 DMARC requirements, and the shutdown of the UK NCSC Mail Check driving demand for DMARC-as-a-service. Red Sift has a blue-chip diversified customer base of over 1,200 organisations including ZoomInfo, Domino's, TalkTalk, Wise, Holland & Barrett, Capgemini, ITV, TUI, and Save the Children, reducing single-customer concentration risk. Product breadth has expanded from single-product DMARC to a Pulse platform covering email, web/PKI (via Hardenize acquisition) and attack surface management. Key risks include likely continued operating losses typical of VC-backed SaaS scale-ups at this stage, competitive pressure from a crowded DMARC market (Valimail, Proofpoint, Cisco/Agari, EasyDMARC, dmarcian), ongoing R&D investment requirements for newer products (Brand Trust, Certificates, ASM, Radar), and the fact that the last equity round was raised in Q1 2022 under a very different rate environment—future rounds or refinancing may involve dilution or covenants. FX exposure exists due to UK cost base with significant USD revenue base.
Key strengths: US $54M Series B raised January 2022 led by Highland Europe with additional venture debt, High-quality investor syndicate: Highland Europe, Sands Capital, MMC Ventures, Oxford Capital, Wing VC, Recurring-revenue SaaS model providing predictable ARR, Strong regulatory tailwinds (Google/Yahoo/Microsoft enforcement, PCI DSS 4.0.1), Over 1,200 blue-chip customer organisations with diversified base, Broadened product platform via Hardenize acquisition (2022), G2 leader status in DMARC market
Risk factors: Likely still loss-making as typical VC-backed SaaS scale-up, Crowded competitive DMARC market with commoditisation pressure on pricing, Continued R&D spend required for newer products (Brand Trust, Certificates, ASM, Radar), Last equity round raised Q1 2022 in different rate environment; future refinancing risk, FX exposure between UK cost base and USD revenue base, Profitability inflection date not publicly disclosed
Revenue by geography
- UK & EMEA: 0%
- North America: 0%
- APAC / Australia: 0%
Revenue by product/service
- Red Sift ASM: 0%
- Red Sift Radar: 0%
- Red Sift OnDMARC: 0%
- Red Sift Brand Trust: 0%
- Red Sift Certificates: 0%
Workforce by country
- Australia: 0
- United States: 0
- United Kingdom: 0
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.