SPF Management (AutoSPF): Automatic SPF Flattening Under the 10-Lookup Limit | DuoCircle

Someone on your team finally pasted your SPF record into a checker and saw the result: the 10-DNS-lookup limit blown, authentication quietly degrading, and a list of senders nobody can prune. AutoSPF flattens every included sender into a single hosted record, watches the upstream for changes, and keeps your SPF posture intact.
AutoSPF was the first product DuoCircle built from scratch after our 2014 founding. The story is short. A customer paying us about $4 a month for forwarding came back with a question: their SPF record had blown the 10-DNS-lookup limit, authentication was failing, and they needed someone to flatten and maintain it for them.
The only specialist providing that service at the time wanted roughly $1,000 a month to take the work on. The math, on a $4-a-month customer, did not pencil out. So we wrote the flattening engine ourselves, hosted the record, monitored the upstream senders, and charged a price that matched the actual cost of running the service.
AutoSPF now runs for organizations up to and including a $16 billion IT services firm, on the same engine, on the same volume-based pricing model. The customer who originally asked for it is still on the platform.
You point your domain's SPF record at AutoSPF once. From there, the service does four things continuously.
Every included sender resolved and flattened into a single SPF record we host on your behalf. Your published record stays well under the 10-DNS-lookup limit no matter how many ESPs, marketing tools, transactional providers, and helpdesks you add.
Senders change their SPF includes constantly. Google Workspace adds a netblock, a marketing platform rotates infrastructure, a payroll vendor adjusts its outbound IPs. AutoSPF re-resolves your includes daily, picks up the change, and updates your hosted record before authentication breaks.
When an upstream sender changes its IPs, you find out. Email notifications and webhook deliveries surface the diff so your team has a record of what changed and when. No silent reshuffling of your authentication posture.
You pay for the senders you actually flatten. SMB starts cheap, enterprise scales without re-negotiating, and there are no per-feature add-ons buried behind a sales call. The pricing is on the product site.
You only send from a single source. If your SPF record contains one Microsoft 365 or Google Workspace include and nothing else, you are nowhere near the 10-DNS-lookup limit. Flattening adds operational dependency you don't yet need. Come back when you've added a few more senders.
You need full DMARC enforcement and reporting today. SPF flattening fixes the lookup-limit half of the authentication picture. The reporting and enforcement half lives in DMARC Report. Many customers run both, but they solve different parts of the problem.
You're shopping the high-end incumbents. If the procurement requirement is a specific brand on the invoice, AutoSPF is not that brand. We do publish a side-by-side at Valimail alternatives so you can decide on the technical merits rather than the vendor logo.
When you reach out about AutoSPF, the person on the call is the person who will actually look at your SPF record. We pull it up, count the lookups, identify which includes are inflating the count, and tell you whether AutoSPF is the right fix. Sometimes the answer is yes. Sometimes the answer is "you have three vendor includes you stopped using two years ago, prune those first." Both answers are free.
If AutoSPF is a fit, the rollout is short. You publish the new SPF record pointing at AutoSPF, we resolve and flatten your includes, and the service starts monitoring the upstream the same day. The next time Google Workspace updates its SPF includes, you don't notice, because nothing breaks.
AutoSPF is part of the broader Authenticate group. Most customers who fix their SPF record with us end up with DMARC Report shortly after, because the next question after "is my SPF clean" is "who is actually sending mail as my domain right now."
Same-day response. Real expert on the call. We tell you whether AutoSPF is the right fix and, if it isn't, what is.
Email experts, not sales reps. Since 2014. by DuoCircle LLC.
© 2026 DuoCircle LLC. All rights reserved. ve513335ec0a1