Red Sift brings OnDMARC integration to Microsoft Sentinel

Red Sift has added its OnDMARC integration for Microsoft Sentinel to Microsoft Marketplace, giving Microsoft customers a new way to stream DMARC and email authentication data into their security operations workflow. The move extends Red Sift’s Microsoft Intelligent Security Association membership and targets faster detection of phishing, spoofing and business email compromise.

Why it matters: - Phishing was the initial access vector in 16% of breaches, and that share rose to 44% in AI-assisted intrusions, according to the Verizon 2026 Data Breach Investigations Report. - Email authentication failures can be early signs of phishing or spoofing. - The integration puts those signals into Microsoft Sentinel, where security teams already investigate threats.

What happened: - Red Sift announced the Red Sift OnDMARC Integration for Microsoft Sentinel is now available in Microsoft Marketplace. - Microsoft customers worldwide can discover and deploy the integration through the marketplace. - The integration is available to existing Red Sift OnDMARC customers. - Customers can buy Red Sift OnDMARC through Microsoft Marketplace and apply the purchase to Microsoft Azure Consumption Commitment.

The details: - The integration streams DMARC forensic data and email authentication events into Microsoft Sentinel as events occur. - Once enabled, OnDMARC forensic data, including SPF and DKIM results, flows into the Microsoft Sentinel workspace in real time. - The setup avoids manual exports and polling. - Security teams can surface suspicious senders, domains and login anomalies that may signal phishing campaigns and business email compromise. - Red Sift says OnDMARC helps organizations reach DMARC enforcement quickly. - Red Sift says the company is trusted by more than 1,200 teams worldwide. - Red Sift’s OnDMARC extends its standing as an official member of the Microsoft Intelligent Security Association. - Under MISA, OnDMARC offers phishing protection to Office 365 customers.

Between the lines: - The launch pushes email authentication signals closer to the security operations center, which can reduce the delay between detection and investigation. - The Microsoft Marketplace listing also lowers friction for procurement and deployment inside Microsoft’s cloud ecosystem. - Microsoft framed Marketplace as a way for organizations and partners to move faster and work smarter by connecting them with trusted solutions in one place.

What's next: - Existing OnDMARC customers can start using the Microsoft Sentinel integration now. - Red Sift and Microsoft are likely to use the marketplace channel to expand adoption across Azure and other Microsoft products. - The integration may become more attractive as phishing and AI-assisted attacks continue to rise.