HENNGE K.K. (Headquarters: Shibuya-ku, Tokyo; Representative Director and CEO: Kazuhiro Ogura) announces the launch of “HENNGE Domain Protection,” a new service added to its cloud security platform “HENNGE One” that detects and helps counter spoofed emails exploiting a company’s domain. This service makes it simple for organizations to implement and operate DMARC, the mechanism that prevents email spoofing, on their own domains. It is available through the newly launched top-tier plan “HENNGE One Ultra” and existing plans such as “DLP.”
As a crucial component of HENNGE’s Zero Trust strategy, HENNGE Domain Protection secures email domains—the foundation of corporate trust—alongside ID management, endpoint protection, and data leak prevention. Compliance with DMARC also serves as the first step toward adopting “BIMI,” which displays a company’s official logo as the email sender’s icon, thereby contributing to brand protection.
As widely reported, cyber attackers are increasingly leveraging cutting-edge technologies, including AI, to craft highly sophisticated spoofed emails. To combat these threats, leading email service providers are tightening domain authentication requirements for both inbound and outbound traffic, strongly encouraging organizations to eradicate fraudulent emails by implementing DMARC.
For instance, Google began enforcing strict guidelines in 2024 to reject emails from senders failing DMARC compliance. Furthermore, various Japanese regulatory frameworks—including those from the Ministry of Internal Affairs and Communications and the Financial Services Agency—now strongly advocate for DMARC adoption (*1).
Despite its importance, implementing DMARC presents several hurdles, such as the need to analyze complex XML report data and the risk of legitimate emails failing to reach the inbox when enforcement policies are strictly applied. As policies become stricter, emails from senders that do not comply with email authentication may no longer reach their destinations. HENNGE Domain Protection addresses these challenges by providing the following specialized features and services.
*1 According to Information and Communications in Japan (White Paper 2026 Edition), as of December 2025, DMARC adoption for .jp domains reached approximately 37.2% (up by about 5 percentage points year-on-year), while SPF (Sender Policy Framework), which authenticates via IP address, reached approximately 89.6%, both showing an upward trend.
■ Empowering Independent DMARC Deployment and Management Through Status Visualization
(Figure: HENNGE Domain Protection dashboard screen. The red “DMARC Failure” section on the far right indicates emails with a high likelihood of being spoofed.)
HENNGE Domain Protection supports organizations through five key stages: DMARC record generation, data accumulation, report analysis and visualization, policy escalation, and continuous operation.
At its core is an intuitive dashboard that simplifies complex, hard-to-decipher DMARC reports. This tool empowers IT department administrators to analyze data independently and make informed decisions regarding security policy escalation. Specifically, the service enables compliance through the following steps:
- DMARC Record Generation: Create DMARC records in just a few steps with automatic validation simply by entering the target domain into the management console.
- Report Analysis and Visualization: Gain immediate visibility via an intuitive dashboard that categorizes email statuses—such as DMARC authentication success rates, spoofing incidents, and email forwarding—while identifying all senders using the company domain by visualizing IP address data.
- Policy Escalation: Identify deficiencies in DKIM/SPF configurations based on monitoring results, aiding preparations to escalate DMARC policies. This supports smooth transitions to stricter policies, such as “quarantine” (moving suspicious emails to spam) or “reject” (blocking them entirely).
■ Service Availability & Supported Plans
General Availability: October 9, 2026
Availability Model: Offered as an integrated component within HENNGE One plans and is not available as a standalone contract.
- HENNGE One Ultra (¥2500 / user / month, excluding tax) The top-tier suite plan offering access to all HENNGE One services. Domain Protection supports management for up to 50 organizational domains.
- HENNGE One DLP Pro (¥650 / user / month, excluding tax) A new advanced plan offering various DLP services to prevent accidental email transmissions and data leaks. Domain Protection supports management for up to 50 organizational domains.
- HENNGE One DLP (¥450 / user / month, excluding tax) An existing plan for DLP to prevent accidental email transmissions and data leaks. Domain Protection supports management for 1 organizational domain.
In addition, the service is available with existing “HENNGE One Pro / Basic” and “DLP for Education” plans. For more details, please visit (available only in Japanese): https://hennge.com/jp/service/one/plan2026
Domain Protection is a product developed by HENNGE’s Customers Mail Cloud division, which provides email services to financial institutions and corporate clients. Under Customers Mail Cloud, it is sold as a standalone service.
■ Glossary of Terms
DMARC
Domain-based Message Authentication, Reporting & Conformance (DMARC) is a pivotal domain authentication technology. It enables service providers on the receiving end to verify the legitimacy of emails sent by organizations, thereby mitigating risks posed by phishing attempts and spoofed communications. A defining feature of DMARC is that it allows administrators on the sending side to specify handling actions, such as outright rejection, for emails that fail domain authentication on the receiving end.
BIMI
Brand Indicators for Message Identification (BIMI) is an email standard that enables the display of a sender’s trademarked brand logo as an icon within recipient inboxes for authenticated messages. By helping users visually distinguish authentic communications from fraudulent or spoofed emails, BIMI strengthens trust in the sender’s identity. The mechanism works by integrating DMARC authentication with a digital certificate called a Verified Mark Certificate (VMC) issued by a recognized authority; the logo is displayed only after a message successfully passes these security checks.
About Customers Mail Cloud
Customers Mail Cloud is a highly specialized cloud email delivery service provided by HENNGE, balancing advanced security requirements with delivery reliability. In recent years, following the strict enforcement of sender guidelines and reinforced receiving restrictions by major providers such as Google and Microsoft, ensuring the reliable and immediate delivery of critical transactional emails has become a crucial challenge for companies offering customer-facing services. Flexibility and adaptability are especially essential for highly confidential emails, such as login notifications and transaction confirmations. To address these challenges, Customers Mail Cloud is widely used by corporations and organizations across various industries, including major financial institutions (banks, credit card companies, insurance, and securities), leading telecommunications carriers, government agencies, and local municipalities.
URL: https://smtps.jp/web/ (available only in Japanese)
About HENNGE One
HENNGE One is a cloud security service with the largest market share in Japan* that helps businesses boost productivity. While leveraging new technologies like SaaS is vital for productivity gains, businesses face challenges such as implementing zero-trust security.
To address these challenges, HENNGE One offers three editions: the Identity Edition, which centralizes and protects multiple system IDs for secure and efficient work; the DLP Edition, which prevents accidental leaks of scattered organizational information; and the Cybersecurity Edition, which safeguards companies from cyber-attacks through a comprehensive approach spanning technology, people, and processes.
It achieves zero-trust security through a holistic security service, which reduces the burden of implementation and operation, thereby fulfilling the liberation of technology.
URL： https://hennge.com/global/service/one/
About HENNGE K.K.
Guided by its corporate philosophy, “Liberation of Technology to Change the World,” HENNGE K.K. is dedicated to bridging the gap between advanced technologies and practical application. The company develops and provides two distinctive services: HENNGE One, Japan’s leading cloud security service (*2) trusted by over 3 million users, which offers comprehensive security including single sign-on (SSO), access management, email security, secure file sharing, alongside device management and protection based on zero-trust principles; and Customers Mail Cloud, a high-reliability cloud email delivery service.
The company name “HENNGE” combines the Japanese word for transformation, HENNKA, with “CHALLENGE,” reflecting its commitment to embracing change as an opportunity. Established in November 1996, HENNGE listed on the Tokyo Stock Exchange Mothers market (now Growth) in October 2019, and established HENNGE AI in October 2026.
Company name: HENNGE K.K. (securities code: 4475)
Address: Daiwa Shibuya Square, 16-28 Nampeidaicho, Shibuya-ku, Tokyo
Representative: Kazuhiro Ogura (Representative Director, President and CEO)
URL: https://hennge.com/global/
*2 Ranked No. 1 in the IDaaS Market (Sales and Share by Vendor) for five consecutive years from FY2021 through FY2025 (forecast), based on the ITR Market View: Identity and Access Management/Personal Authentication Cybersecurity Market 2026 by ITR.
– Press Contact
HENNGE K.K.
Corporate Communication Division
Email: hennge-pr@hennge.com
TEL: 03-6415-3660
The names of companies, products, and services mentioned in this press release are trademarks or registered trademarks of HENNGE K.K. or other related organizations.