SPF Management.
Flat record, full coverage.
Someone on your team finally pasted your SPF record into a checker and saw the result: the 10-DNS-lookup limit blown, authentication quietly degrading, and a list of senders nobody can prune. AutoSPF flattens every included sender into a single hosted record, watches the upstream for changes, and keeps your SPF posture intact while you keep adding the tools your business actually uses.
DuoCircle's first net-new product, built because the math didn't work
AutoSPF was the first product DuoCircle built from scratch after our 2014 founding. The story is short. A customer paying us about $4 a month for forwarding came back with a question: their SPF record had blown the 10-DNS-lookup limit, authentication was failing, and they needed someone to flatten and maintain it for them.
The only specialist providing that service at the time wanted roughly $1,000 a month to take the work on. The math, on a $4-a-month customer, did not pencil out. So we wrote the flattening engine ourselves, hosted the record, monitored the upstream senders, and charged a price that matched the actual cost of running the service.
AutoSPF now runs for organizations up to and including a $16 billion IT services firm, on the same engine, on the same volume-based pricing model. The customer who originally asked for it is still on the platform.
The mechanics, plainly
You point your domain's SPF record at AutoSPF once. From there, the service does four things continuously.
Automatic SPF flattening
Every included sender resolved and flattened into a single SPF record we host on your behalf. Your published record stays well under the 10-DNS-lookup limit no matter how many ESPs, marketing tools, transactional providers, and helpdesks you add.
Continuous upstream monitoring
Senders change their SPF includes constantly. Google Workspace adds a netblock, a marketing platform rotates infrastructure, a payroll vendor adjusts its outbound IPs. AutoSPF re-resolves your includes daily, picks up the change, and updates your hosted record before authentication breaks.
Change alerts and webhooks
When an upstream sender changes its IPs, you find out. Email notifications and webhook deliveries surface the diff so your team has a record of what changed and when. No silent reshuffling of your authentication posture.
Volume-based pricing
You pay for the senders you actually flatten. SMB starts cheap, enterprise scales without re-negotiating, and there are no per-feature add-ons buried behind a sales call. The pricing is on the product site.
The audience
- IT teams whose SPF record has crept past the 10-DNS-lookup limit and are now seeing intermittent SPF PermError on outbound mail
- Organizations that send through five or more sources (Microsoft 365 or Google Workspace plus marketing automation, transactional, helpdesk, payroll, and a CRM)
- Operations teams who don't want to re-flatten the SPF record by hand every time a vendor changes its includes
- MSPs and consultants managing SPF for portfolios of client domains who need a single place to maintain authentication posture
- Procurement teams comparing AutoSPF against the high-priced incumbents and looking for capability without a five-figure annual commitment
We're not the right answer if
You only send from a single source. If your SPF record contains one Microsoft 365 or Google Workspace include and nothing else, you are nowhere near the 10-DNS-lookup limit. Flattening adds operational dependency you don't yet need. Come back when you've added a few more senders.
You need full DMARC enforcement and reporting today. SPF flattening fixes the lookup-limit half of the authentication picture. The reporting and enforcement half lives in DMARC Report. Many customers run both, but they solve different parts of the problem.
You're shopping the high-end incumbents. If the procurement requirement is a specific brand on the invoice, AutoSPF is not that brand. We do publish a side-by-side at Valimail alternatives so you can decide on the technical merits rather than the vendor logo.
A real expert, same day
When you reach out about AutoSPF, the person on the call is the person who will actually look at your SPF record. We pull it up, count the lookups, identify which includes are inflating the count, and tell you whether AutoSPF is the right fix. Sometimes the answer is yes. Sometimes the answer is "you have three vendor includes you stopped using two years ago, prune those first." Both answers are free.
If AutoSPF is a fit, the rollout is short. You publish the new SPF record pointing at AutoSPF, we resolve and flatten your includes, and the service starts monitoring the upstream the same day. The next time Google Workspace updates its SPF includes, you don't notice, because nothing breaks.
AutoSPF is part of the broader Authenticate group. Most customers who fix their SPF record with us end up with DMARC Report shortly after, because the next question after "is my SPF clean" is "who is actually sending mail as my domain right now."
Talk to an expert about your SPF record
Same-day response. Real expert on the call. We tell you whether AutoSPF is the right fix and, if it isn't, what is.