Digital trust giant moves into DMARC as consolidation accelerates
DigiCert has agreed to acquire email authentication specialist Valimail, in a deal that signals growing consolidation in the email security sector. Financial terms were not disclosed, but the move positions DigiCert to expand beyond certificates into the fast-growing market for DMARC enforcement and related technologies.
The acquisition pairs DigiCert’s role as a leading certificate authority and Verified Mark Certificate (VMC) issuer with Valimail’s recognised strength in DMARC. Valimail is the only provider with FedRAMP approval, giving it a foothold in sensitive US government and regulated industries. DigiCert says the companies will continue to operate separately in the short term, with Valimail’s services folded into the DigiCert ONE platform over time.
Competitive Landscape
Valimail has grown its customer base rapidly and currently leads G2’s DMARC rankings, giving DigiCert immediate scale in a sector that analysts expect to be worth more than £3bn in the next few years. The combined offering will likely increase pressure on other DMARC vendors, including Proofpoint, dmarcian and PowerDMARC, particularly in the mid-market where Valimail has been strongest.
For customers, the merger could make implementation of DMARC and BIMI simpler, with a single vendor providing certificates, VMCs and enforcement. But it may also reduce choice and negotiating power, a common concern as security markets consolidate into platform plays.
Integration and Pricing
DigiCert has pledged that Valimail customers will see no immediate disruption. Longer term, Valimail’s technology is expected to underpin new DigiCert ONE capabilities spanning domains, certificates, devices and email authentication.
The deal comes as DigiCert prepares to increase certificate prices from August 2025, suggesting the company is confident in its market leverage. The addition of Valimail’s customer base could further strengthen that position.
What matters to emailexpert readers
For email marketers, the acquisition underlines how authentication has moved from compliance to competitive advantage. Strong DMARC enforcement and BIMI can improve deliverability and brand recognition, but costs could rise if consolidation limits alternatives.
The transaction is expected to close in the fourth quarter of 2025, subject to regulatory approval.
