Provider

Barracuda

1,037 domains tracked. 53.0% at DMARC enforcement (p=reject or p=quarantine), backed by 550 enforced domains.

Domains tracked
1K+
1,037
DMARC enforcement
53.0%
p=reject + p=quarantine
Avg posture score
61.6
of 100
A-grade domains
9
1 A+ · 8 A

Authentication posture

per protocol

DMARC

policy enforcement: 53.0%
reject
24.0%
quarantine
29.0%
none
38.1%
missing
8.9%

SPF

pass rate: 96.7%
0
pass
96.7%
warn
1.4%
fail
1.8%
not found
0.0%

DKIM

pass rate: 82.4%
0
pass
82.4%
warn
0.0%
fail
17.5%
not found
0.1%

MTA-STS

pass rate: 1.3%
pass
1.3%
warn
0.6%
fail
97.9%
not found
0.3%

TLS-RPT

pass rate: 2.3%
pass
2.3%
warn
1.0%
fail
96.4%
not found
0.3%

BIMI

pass rate: 1.8%
pass
1.8%
warn
0.3%
fail
97.7%
not found
0.2%

Top performers

20 of 1,037 tracked
#DomainScoreGrade
1boarderie.com97A+
2bathnes.gov.uk93A
3creativeplanning.com91A
4basildon.gov.uk90A
5gorjana.com90A
6bedford.gov.uk88A
7eani.org.uk88A
8arun.gov.uk85A
9britishmuseum.org85A
10globalization-partners.com84B
11hastings.gov.uk84B
12brightonbest.com83B
13eicc.edu83B
14freetaxusa.com82B
15ashtondrake.com80B
16bi.com.gt80B
17bradfordexchange.ca80B
18bradfordexchangechecks.com80B
19emporia.edu80B
20gate1travel.com80B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026