Sector

Nonprofit

26,275 domains tracked. 24.5% at DMARC enforcement (p=reject or p=quarantine), backed by 6,449 enforced domains.

Domains tracked
26K+
26,275
DMARC enforcement
24.5%
p=reject + p=quarantine
Avg posture score
37.5
of 100
A-grade domains
142
2 A+ · 140 A

Authentication posture

per protocol

DMARC

policy enforcement: 24.5%
reject
11.6%
quarantine
12.9%
none
29.1%
missing
46.3%

SPF

pass rate: 69.6%
pass
69.6%
warn
1.4%
fail
27.0%
not found
2.1%

DKIM

pass rate: 48.1%
0
pass
48.1%
warn
0.0%
fail
49.4%
not found
2.4%

MTA-STS

pass rate: 0.8%
pass
0.8%
warn
0.4%
fail
94.9%
not found
3.8%

TLS-RPT

pass rate: 1.6%
pass
1.6%
warn
1.1%
fail
93.4%
not found
3.8%

BIMI

pass rate: 0.5%
pass
0.5%
warn
0.2%
fail
95.4%
not found
3.8%

Top performers

20 of 26,275 tracked
#DomainScoreGrade
1teachfirst.org.uk95A+
2unicef.org.au95A+
3parkinsons.org.uk94A
4sanfordhealth.org94A
5votebeat.org94A
6agc.org93A
7mountvernon.org93A
8nexus.org.uk93A
9olympic.org93A
10internetcomputer.org92A
11mrcpuk.org92A
12theccc.org.uk92A
13tnlcommunityfund.org.uk92A
14ipmsg.org91A
15northyorkmoors.org.uk91A
16wildlifetrusts.org91A
17a2gov.org90A
18afponline.org90A
19britishcycling.org.uk90A
20csswg.org90A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026