Red Sift OnDMARC joins the Jisc Chest platform to strengthen email security in the education sector

With the National Cyber Security Centre’s (NCSC) Mail Check tool having retired its free DMARC reporting service in March 2025, education and research institutions across the UK are now facing a critical visibility gap when it comes to email-based threats.

To help address this, Red Sift is now working with Jisc—the UK’s not-for-profit provider of digital and technology services for education and research. As part of this collaboration, Red Sift OnDMARC is now available to purchase through Jisc’s Chest platform.

Developed by UK-founded cybersecurity company Red Sift, OnDMARC is an enterprise-grade DMARC solution that simplifies email authentication through automation, real-time compliance tracking, and an intuitive dashboard designed to reduce complexity. With Jisc-banded pricing, institutions of all sizes can now access trusted, cost-effective email protection—backed by expert support and tailored to the unique needs of the education sector.

DMARC adoption across .ac.uk domains remains critically low

A recent analysis conducted by Red Sift of over 4,000 .ac.uk domains reveals that 74% still have no DMARC record in place, leaving them vulnerable to spoofing and phishing attacks. Even among domains with DMARC configured, only 8% have reached the strongest level of enforcement (p=reject).



This data highlights a sector-wide need for easier, faster adoption of email authentication—and underscores the importance of the new Jisc agreement with Red Sift OnDMARC in helping institutions close this gap.

This new agreement gives institutions access to:

  • Automated SPF, DKIM, DMARC, and MTA-STS configuration to prevent email impersonation and manual configurations prone to human errors
  • Aggregated and extended forensic reporting, with custom alerts for proactive security 
  • Unlimited email traffic with no volume-based restrictions or hidden costs
  • Fast, low-effort implementation through a structured success plan designed for education by our best-in-class Customer Success team
  • Preferential pricing aligned with Jisc’s Higher Education (HE) and Further Education (FE) banding model

By removing common adoption barriers such as complexity, cost, and capacity, this collaboration helps UK institutions move quickly toward a more secure and trusted email ecosystem.

Join our free webinar to learn more

To support institutions in strengthening their email security, we’re hosting a webinar on Wednesday, 30 April at 11:00 to introduce Red Sift OnDMARC to Jisc members. Join John Bavester and Jorge Montiel as they unpack the current state of DMARC in education, share rollout best practices, and demonstrate how OnDMARC helps improve domain security, compliance, and trust. You will also hear from Jisc, who will be available to answer any licensing queries.

👉 Register your interest here.

PUBLISHED BY

Francesca Rünger-Field

10 Apr. 2025

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
AI

Staying ahead of AI-powered brand impersonation

Rahul Powar

Executive summary: AI has supercharged brand impersonation, with Q2 2024 seeing nearly half of all processed emails containing spoofing or phishing attempts—40% of which were AI-generated. The scale, speed, and sophistication of these attacks are overwhelming security teams, draining resources on false positives, and leaving critical threats undetected. Consumers are unforgiving when trust is…

Read more
BEC

What is email spoofing and how can you prevent it?

Faisal Misle

Executive summary: Email spoofing is a growing cyber threat where attackers forge the sender’s address to impersonate trusted sources, enabling phishing, business email compromise, and financial fraud. Because legacy email protocols like SMTP lack strong authentication, spoofing can bypass traditional filters. Organizations can mitigate this risk by implementing robust email authentication measures, especially DMARC.…

Read more
Email

What is social engineering and how can you prevent it?

Jack Lilley

Executive summary: Email phishing has evolved and criminals now use social engineering to impersonate executives, suppliers, and even government agencies, persuading recipients to approve payments or disclose credentials. Because human judgment sits at the heart of these attacks, technical controls that eliminate spoofed messages before they reach the inbox are essential. DMARC provides that…

Read more
Cybersecurity

Attackers are abusing Microsoft 365: Here’s how to stay protected

Jack Lilley

Executive summary: Varonis has surfaced an active phishing campaign that spoofs internal users by abusing Microsoft 365’s Direct Send feature. Because Direct Send doesn’t require authentication and is treated as “internal,” these messages often bypass the checks you rely on for outside mail. Microsoft now offers an opt-in switch, RejectDirectSend, to block the pathway,…

Read more