Sector
Government
7,982 domains tracked. 47.8% at DMARC enforcement (p=reject or p=quarantine), backed by 3,812 enforced domains.
Domains tracked
7K+
7,982
DMARC enforcement
47.8%
p=reject + p=quarantine
Avg posture score
43.0
of 100
A-grade domains
199
1 A+ · 198 A
Authentication posture
per protocolDMARC
policy enforcement: 47.7%reject
25.6%quarantine
22.1%none
15.8%missing
36.4%SPF
pass rate: 77.2%pass
77.2%warn
1.2%fail
17.4%not found
4.2%DKIM
pass rate: 40.5%pass
40.5%warn
0.1%fail
52.4%not found
6.9%MTA-STS
pass rate: 3.0%pass
3.0%warn
0.8%fail
87.0%not found
9.2%TLS-RPT
pass rate: 5.0%pass
5.0%warn
0.7%fail
85.2%not found
9.2%BIMI
pass rate: 0.2%0
pass
0.2%warn
0.0%fail
90.6%not found
9.2%Top performers
20 of 7,982 tracked| # | Domain | Score | Grade |
|---|---|---|---|
| 1 | rpvca.gov | 96 | A+ |
| 2 | doc.govt.nz | 94 | A |
| 3 | bathnes.gov.uk | 93 | A |
| 4 | cumbria.gov.uk | 93 | A |
| 5 | dudley.gov.uk | 93 | A |
| 6 | greatermanchester-ca.gov.uk | 93 | A |
| 7 | kent.gov.uk | 93 | A |
| 8 | legislation.govt.nz | 93 | A |
| 9 | leoncountyfl.gov | 93 | A |
| 10 | northyorks.gov.uk | 93 | A |
| 11 | wandsworth.gov.uk | 93 | A |
| 12 | agricultura.gov.br | 92 | A |
| 13 | agro.gov.br | 92 | A |
| 14 | bracknell-forest.gov.uk | 92 | A |
| 15 | cafcass.gov.uk | 92 | A |
| 16 | communities.gov.uk | 92 | A |
| 17 | dda.gov.ae | 92 | A |
| 18 | dfid.gov.uk | 92 | A |
| 19 | durham.gov.uk | 92 | A |
| 20 | eastlothian.gov.uk | 92 | A |
How this is measured
Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.
Data provenance
- Scanner — Authex Labs public scanner (DNS, RFC-compliant)
- Refreshed — daily at 04:05 UTC
- Last seen — 8 May 2026