For web agencies, MSPs and IT firms
Catch client problems before your clients call.
Hillsphere watches every client's email authentication, DNS and website basics, puts the most urgent client at the top of one list, and turns each problem into a fix guide you, or the client's IT person, can follow.
Your clients, most urgent first
Example-
F
Urgent
Bob's Bakery
No DMARC on a domain that sends mail
-
C
Changed
Hollow Creek Farm
An expected record disappeared
-
B
Ready
Ridge Dental
Ready to move DMARC to quarantine
-
A
Mountain Outfitters
Nothing to do
The Partner plan
Less time per client, and clients who see you on top of it
Know who needs you first
Every client in one list, most urgent first, with what changed since you last looked. Filter it and acknowledge in bulk.
Fix guides, not research
Steps for the client's DNS host, using its own field names, with copy buttons. Problems are grouped by root cause, so one fix closes several.
Hand off, and know it's done
Can't touch the client's DNS? Send the fix to whoever can. No account for them; you see when it's opened and marked done, and a check confirms it.
Scoped staff, private notes
Give each team member access to just their clients, and keep internal notes your clients never see.
Your name on client emails
Alerts, summaries and fix requests to clients go out with your sender name and your colour.
Clients keep control
Each client keeps their own account and can remove your access at any time, which makes saying yes easy.
What we check
The checks you'd run yourself, on every client, all the time
Problems are explained in plain words, so you can forward them to clients as they are.
- SPF, DKIM and DMARC
-
Missing or duplicate SPF records, too many lookups,
+all, senders left out; DKIM selectors that are missing, weak or in test mode; DMARC policy andpct. - DMARC report ingestion
-
Aggregate reports go to a Hillsphere address. Every source is sorted into aligned,
misaligned, forwarded or unauthorized, with a fix plan from
p=nonetoquarantinetorejectand a readiness check before each step. - Drift on expected records
- Records you rely on that go missing or change, or come back when they should be gone, including a site's address record. Plus MX and CAA.
- Certificates, registrar and takeovers
- TLS certificates that have expired, expire within 21 days or don't cover the hostname; registrations expiring within 30 days; dangling CNAMEs open to subdomain takeover.
Also MTA-STS, TLS-RPT and BIMI readiness. Each account gets an A–F grade.
Questions
What agencies ask
Who owns the client's account?
The client does. You look after it from your Partner account, and the client can remove your access at any time. Ownership of each domain is proved with a TXT record, or your staff can mark a client's domain verified by hand.
Do we need access to the client's DNS?
No. Hillsphere only reads DNS. When a change is needed, make it yourself or send the fix to whoever holds the login; they don't need an account, and a check confirms it.
What does white-labelling cover?
Client emails go out with your sender name and your colour. Logos aren't part of it.
Where do alerts go?
Urgent problems alert right away by email, Slack, Microsoft Teams, Discord, or webhook. Everything else waits for the Monday summary.
How much is Partner?
Write to us at hello@hillsphere.io and we'll talk it through.
See what your clients' domains look like today
Run the free check on any client's domain, then talk to us about Partner.
Talk to us about Partner