Provider

Mimecast

3,251 domains tracked. 59.2% at DMARC enforcement (p=reject or p=quarantine), backed by 1,925 enforced domains.

Domains tracked
3K+
3,251
DMARC enforcement
59.2%
p=reject + p=quarantine
Avg posture score
60.3
of 100
A-grade domains
50
3 A+ · 47 A

Authentication posture

per protocol

DMARC

policy enforcement: 59.3%
reject
36.5%
quarantine
22.8%
none
31.8%
missing
9.0%

SPF

pass rate: 96.8%
0
pass
96.8%
warn
1.5%
fail
1.7%
not found
0.0%

DKIM

pass rate: 72.6%
0
pass
72.6%
warn
0.0%
fail
27.1%
not found
0.3%

MTA-STS

pass rate: 1.8%
pass
1.8%
warn
1.2%
fail
96.6%
not found
0.4%

TLS-RPT

pass rate: 3.8%
pass
3.8%
warn
0.3%
fail
95.5%
not found
0.4%

BIMI

pass rate: 2.6%
pass
2.6%
warn
0.2%
fail
96.8%
not found
0.4%

Top performers

20 of 3,251 tracked
#DomainScoreGrade
1ccu.com95A+
2cliffordchance.com95A+
3hollandandbarrett.com95A+
4clearscore.com94A
5atgtickets.com92A
6foundersfund.com92A
7eragroup.com91A
8acalbfi.com90A
9agero.com90A
10brandonhirestation.com90A
11chichester.gov.uk90A
12element.com90A
13hollandandbarrett.be90A
14hollandandbarrett.ie90A
15hollandandbarrett.nl90A
16arcserve.com89A
17clarke-energy.com89A
18corcystems.com89A
19domesticandgeneral.com89A
20drmartens.com89A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026