Provider

Proofpoint

4,505 domains tracked. 70.2% at DMARC enforcement (p=reject or p=quarantine), backed by 3,161 enforced domains.

Domains tracked
4K+
4,505
DMARC enforcement
70.2%
p=reject + p=quarantine
Avg posture score
62.3
of 100
A-grade domains
30
0 A+ · 30 A

Authentication posture

per protocol

DMARC

policy enforcement: 70.1%
reject
55.3%
quarantine
14.8%
none
23.8%
missing
6.1%

SPF

pass rate: 96.3%
0
pass
96.3%
warn
0.7%
fail
3.0%
not found
0.0%

DKIM

pass rate: 70.8%
0
pass
70.8%
warn
0.0%
fail
29.1%
not found
0.2%

MTA-STS

pass rate: 0.7%
pass
0.7%
warn
0.6%
fail
98.4%
not found
0.2%

TLS-RPT

pass rate: 1.9%
pass
1.9%
warn
0.2%
fail
97.7%
not found
0.2%

BIMI

pass rate: 3.7%
pass
3.7%
warn
0.2%
fail
95.9%
not found
0.2%

Top performers

20 of 4,505 tracked
#DomainScoreGrade
1aura.com93A
2beyondtrust.com93A
3dnb.no93A
4finnpartners.com93A
5cmegroup.com90A
6crowdstrike.com90A
7clsa.com89A
8firstquality.com89A
9cmcss.net88A
10daily-journal.com88A
11firsthealth.org88A
12aguasandinas.cl87A
13amat.com87A
14arlo.com87A
15ceicdata.com87A
16cotecna.com87A
17danone.com87A
18emis.com87A
19etrusted.com87A
20brivo.com86A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026