Research

Original data on email authentication adoption. Quarterly scans of 10,000+ domains from the Tranco Top Sites List, covering DMARC, SPF, DKIM, MTA-STS, BIMI, and DANE.

7 Studies
10K+ Domains Scanned
6 Protocols
Q1 2026 Latest Data
Flagship Study

Nearly 4 in 10 top domains have no DMARC protection — and zero deploy DANE

62.5% DMARC Adoption
46.0% Enforcement
67.6% SPF Adoption
0.0% DANE Adoption

State of Email Authentication 2026

10K domains
DMARCSPFDKIMMTA-STSBIMIDANE

Coming Soon

These studies are in progress. Subscribe to get notified when they publish.

Sector Analysis

CISA mandates drove .gov domains to 85% DMARC adoption — 22 points above average

~85% DMARC Adoption
~60% Enforcement

Government Email Security

150 domains
DMARCSPF
Sector Analysis

Alumni email forwarding breaks DMARC — .edu domains lag at 55% adoption

~55% DMARC Adoption
~20% Enforcement

Education Email Security

80 domains
DMARCSPF
Sector Analysis

Fortune 500 lead BIMI adoption at 15% — brand visibility drives investment over security

~70% DMARC Adoption
~15% BIMI Adoption

Fortune 500 Email Authentication

300 domains
DMARCSPFBIMI
Protocol Deep Dive

MTA-STS at 1.8% — 34x lower than DMARC despite solving email-in-transit attacks

1.8% MTA-STS Adoption
99 Domains Enforcing

MTA-STS Adoption Study

10K domains
MTA-STS
Protocol Deep Dive

7.5% BIMI adoption — 4x higher than MTA-STS because logos are visible to users

7.5% BIMI Adoption
6.8% Valid SVG Logos

BIMI Adoption Study

10K domains
BIMI
Protocol Deep Dive

Zero DANE adoption among top 10K domains — the protocol that never was

0.0% DANE Adoption
8.9% DNSSEC Deployed

DANE/TLSA Adoption Study

10K domains
DANE

Monitor Your Domains

Get continuous email authentication monitoring, aggregate report parsing, and actionable remediation insights.

Start Free