Sophos launched Sophos Email Plus on April 29, 2026, a new premium tier for its email security platform that bundles DMARC Manager as an included capability rather than a paid add-on. For marketing teams and business owners who depend on email deliverability and domain trust, the timing is deliberate: DMARC enforcement gaps remain a documented, measurable risk to both security and inbox placement.
What Sophos Email Plus Actually Includes
Sophos Email Plus includes everything available in Sophos Email today, with additional premium capabilities on top, for those who need to go further: more history, more control over what happens after delivery, and stronger tools to protect inboxes.
The three headline additions in the Plus tier are:
- DMARC Manager, now bundled at no extra cost
- Enhanced post-delivery protection, extending the window for threat analysis after messages land
- Contact Trace and Recall (CTR), a feature exclusive to Microsoft 365 customers
Contact Trace and Recall gives organizations post-delivery management of inbound emails that have been forwarded internally. If a malicious email lands and gets forwarded across an organization, CTR lets security teams trace where it went and recall it, all from within Sophos Central.
DMARC Manager is included with Sophos Email Plus at no extra cost, though it continues to be available as a separate add-on for existing Sophos Email and EMS customers.
Sophos Email Plus is available for both TERM and MSP Flex licensing from April 29, with a 30-day trial so organizations can test the premium features before committing.
Why DMARC Integration Matters Right Now
The inclusion of DMARC Manager is not cosmetic. The gap between DMARC adoption and actual enforcement is significant, and it has direct consequences for deliverability and brand protection.
EasyDMARC found that valid DMARC adoption grew from 523,921 domains in 2023 to 858,782 in 2025 and 937,931 in early 2026. That sounds like progress, but the enforcement picture is less encouraging. In 2026, 525,996 domains remained at p=none, while enforcement-level policies rose from 233,249 in 2023 to 411,935 in 2026. Monitoring without enforcement leaves a domain open to spoofing.




