DMARC (Domain-based Message Authentication, Reporting, and Conformance) builds on SPF and DKIM by adding a layer of policy and reporting. It allows the domain owner to specify what actions should be taken if an email fails SPF or DKIM checks, such as quarantining or rejecting the email. DMARC also provides detailed reports on email authentication activity.