EasyDMARC and GMO GlobalSign integrate email authentication with verified branding

EasyDMARC has announced a partnership with GMO GlobalSign to combine email authentication management with verified brand identity services. This integration targets organisations struggling with complex email ecosystems that involve numerous cloud applications, marketing platforms and third-party services. According to Help Net Security, the collaboration helps establish trusted email identities through DNS security and verified branding in recipient inboxes.

Root cause

The complexity of modern email infrastructure stems from the proliferation of authorised senders. Every new service introduces additional DNS records and authentication requirements. This fragmentation creates risks for security, deliverability and brand reputation. Organisations often rely on disconnected tools to manage these challenges, leading to visibility gaps across their email ecosystem.

Attack path

While this announcement focuses on defensive posture rather than a specific vulnerability, the underlying risk involves unmanaged senders. Without centralised visibility, organisations may fail to detect unauthorised domain usage or misconfigured authentication records. This lack of oversight can allow spoofed messages to bypass basic checks, impacting deliverability and eroding trust with recipients.

Affected versions

This is a new partnership and product integration, not a software update or patch for a specific version. It applies to organisations using EasyDMARC’s Email Trust Platform and seeking to implement Brand Indicators for Message Identification. No specific software versions are cited as vulnerable or fixed in this context.

Mitigation

• Adopt a unified approach to email trust management to gain visibility into all authorised senders.
• Centralise the management of SPF, DKIM and DMARC records across complex DNS environments.
• Implement Brand Indicators for Message Identification using Verified Mark Certificates from GMO GlobalSign.
• Monitor authentication status and domain health continuously to ensure legitimate messages reach inboxes.

Signals worth monitoring

Teams usually review DNS configuration logs for unexpected changes to SPF or DKIM records. Check whether authentication failures correlate with specific third-party services or marketing campaigns. Look for anomalies in deliverability rates that might indicate misaligned trust signals. Verify that brand indicators display correctly in supported inboxes. Ensure that all authorised senders are explicitly listed in monitoring dashboards to prevent shadow IT from introducing unverified email sources.

Background: Shadow IT

Shadow IT creates unmanaged entry points for attackers. When employees use unapproved apps, your security tools cannot inspect traffic or enforce access controls. This leads to data leakage, compliance failures, and increased attack surfaces that standard perimeter defences cannot see or stop.

Read the full guide: Why is shadow IT dangerous? Real risks and how to manage them

What to do and how to stay safe: EasyDMARC

• Audit your current email sending ecosystem to identify all third-party services using your domains.
• Ensure SPF, DKIM and DMARC records are centrally managed and regularly validated for accuracy.
• Assess readiness for Brand Indicators for Message Identification to enhance brand trust in inboxes.
• Monitor authentication logs for discrepancies between expected and actual sender behaviour.

General security guidance from the Firewall Pulse newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What does the EasyDMARC and GMO GlobalSign partnership offer?

It combines email authentication management with verified brand identity certificates to help organisations display trusted logos in inboxes.

How does this help with email ecosystem complexity?

It provides a unified approach to discover senders, manage DNS records and monitor authentication across multiple cloud applications and services.

What certificates are involved in this integration?

Organisations can obtain Verified Mark Certificates or Common Mark Certificates from GMO GlobalSign to enable Brand Indicators for Message Identification.