Provider

Google Workspace

58,969 domains tracked. 28.2% at DMARC enforcement (p=reject or p=quarantine), backed by 16,609 enforced domains.

Domains tracked
58K+
58,969
DMARC enforcement
28.2%
p=reject + p=quarantine
Avg posture score
44.4
of 100
A-grade domains
259
15 A+ · 244 A

Authentication posture

per protocol

DMARC

policy enforcement: 28.1%
reject
11.9%
quarantine
16.2%
none
32.6%
missing
39.2%

SPF

pass rate: 81.2%
pass
81.2%
warn
2.7%
fail
15.5%
not found
0.6%

DKIM

pass rate: 61.9%
pass
61.9%
warn
0.8%
fail
36.1%
not found
1.2%

MTA-STS

pass rate: 0.7%
pass
0.7%
warn
0.4%
fail
95.5%
not found
3.5%

TLS-RPT

pass rate: 1.2%
pass
1.2%
warn
29.4%
fail
66.0%
not found
3.5%

BIMI

pass rate: 1.4%
pass
1.4%
warn
0.4%
fail
94.7%
not found
3.5%

Top performers

20 of 58,969 tracked
#DomainScoreGrade
1doctolib.com97A+
2doctolib.de97A+
3doctolib.it97A+
4ag-grid.com96A+
5influencity.com96A+
6abbexa.com95A+
7apify.com95A+
8derila.com95A+
9doctolib.fr95A+
10dpreview.com95A+
11drinkag1.com95A+
12earls.ca95A+
13firstup.io95A+
14framery.com95A+
15harri.com95A+
16alison.com94A
17bugmd.com94A
18chalkbeat.org94A
19classi.jp94A
20cookiepal.io94A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026