Sector

Healthcare

4,473 domains tracked. 34.9% at DMARC enforcement (p=reject or p=quarantine), backed by 1,562 enforced domains.

Domains tracked
4K+
4,473
DMARC enforcement
34.9%
p=reject + p=quarantine
Avg posture score
41.7
of 100
A-grade domains
40
2 A+ · 38 A

Authentication posture

per protocol

DMARC

policy enforcement: 34.9%
reject
16.0%
quarantine
18.9%
none
29.7%
missing
35.3%

SPF

pass rate: 71.4%
0
pass
71.4%
warn
1.7%
fail
26.9%
not found
0.0%

DKIM

pass rate: 49.3%
pass
49.3%
warn
0.1%
fail
50.5%
not found
0.1%

MTA-STS

pass rate: 0.8%
pass
0.8%
warn
0.6%
fail
98.1%
not found
0.5%

TLS-RPT

pass rate: 2.1%
pass
2.1%
warn
30.4%
fail
66.9%
not found
0.5%

BIMI

pass rate: 1.4%
pass
1.4%
warn
0.3%
fail
97.8%
not found
0.5%

Top performers

20 of 4,473 tracked
#DomainScoreGrade
1drinkag1.com95A+
2hollandandbarrett.com95A+
3healthspan.co.uk93A
4wales.nhs.uk92A
5amgen.com90A
6biomerieux.com90A
7clinical-partners.co.uk90A
8hollandandbarrett.ie90A
9merseycare.nhs.uk90A
10mft.nhs.uk90A
11uhb.nhs.uk90A
12good-sam.com89A
13ada.com88A
14amboss.com88A
15crunch.com88A
16ecotree.green88A
17esneft.nhs.uk88A
18ewg.org88A
19giveusashout.org88A
20hcpro.com88A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026