p=none — monitoring only

p=none tells receivers to take no enforcement action based on DMARC results — mail that fails SPF/DKIM/alignment is delivered normally. It is the standard starting point: it turns on aggregate reporting so you can see who is actually sending as your domain before you risk blocking anything.

A domain should not stay at p=none indefinitely — it provides visibility but zero anti-spoofing protection. This tool's R7/R8 recommendations flag when the observed data looks safe to advance to quarantine or reject.