Automated DMARC device discovery and workflow

A computer-implemented method, comprising:

• maintaining, by a computing server, a plurality of guided workflow plans, at least one of the guided workflow plans comprising one or more steps associated with setting up a policy;
• receiving, by the computing server, a Domain-based Message Authentication, Reporting and Conformance (DMARC) report associated with a first domain, the computing server being delegated by the first domain to receive, on behalf of the first domain, the DMARC report, wherein the first domain is associated with one or more DMARC policies specifying how emails purportedly originated from the first domain are handled, the DMARC report comprising data of IP addresses attempting to send one or more emails on behalf of the first domain to an recipient server generating the report;
• identifying an entity in the data of the DMARC report;
• identifying metadata associated with the entity;
• searching additional information to determine a nature of the entity;
• selecting, based on the additional information, an applicable guided work plan from the plurality of guided workflow plans;
• and
• causing a graphical user interface to present, according to the applicable guided work plan, a guided workflow for setting up a policy to be associated with the entity.

A non-transitory computer-readable medium configured to store computer code comprising instructions, the instructions, when executed by one or more processors, cause the one or more processors to:

• maintain a plurality of guided workflow plans, at least one of the guided workflow plans comprising one or more steps associated with setting up a policy;
• receive a Domain-based Message Authentication, Reporting and Conformance (DMARC) report associated with a first domain, wherein the first domain delegates a computing server to receive, on behalf of the first domain, the DMARC report, wherein the first domain is associated with one or more DMARC policies specifying how emails purportedly originated from the first domain are handled, the DMARC report comprising data of IP addresses attempting to send one or more emails on behalf of the first domain to an recipient server generating the report;
• identify an entity in the data of the DMARC report;
• identify metadata associated with the entity;
• search additional information to determine a nature of the entity;
• and
• select, based on the additional information, an applicable guided work plan from the plurality of guided workflow plans;
• and
• cause a graphical user interface to present, according to the applicable guided work plan, a guided workflow for setting up a policy to be associated with the entity.