Technical Writing
DMARC & Email Authentication Blog
DMARC, deliverability, and email authentication. Written for builders.
May 21, 2026
DMARC Adoption Statistics 2026: Scanning 2,259 Domains
73.8% of tracked domains have DMARC. Only 60.4% enforce it. We scanned 2,259 domains across 9 industries and found patterns that don't follow who you'd expect to lead.
4 min readResearch
May 12, 2026
38% of Cybersecurity Companies Don't Enforce DMARC on Their Own Domain
We checked 40 cybersecurity companies for DMARC enforcement. 15 of them (companies that sell email security and anti-phishing products to enterprise customers) are still spoofable.
4 min readResearch
May 8, 2026
B2B SaaS DMARC Enforcement in 2026: 63% Protecting, 13% Wide Open
87% of top SaaS companies publish a DMARC record. Only 63% enforce it. A spoofed invoice email from a recognized SaaS brand is a multi-billion dollar fraud category, and a quarter of major SaaS companies aren't blocking it.
4 min readResearch
May 5, 2026
Half of Major News Organizations Are Still Spoofable by Email
14 of the 30 major news outlets we checked either have no DMARC, sit at p=none, or haven't moved past p=quarantine. A spoofed email from the New York Times or CNN will still be delivered.
4 min readResearch
May 1, 2026
Healthcare DMARC: High Coverage, Mid-Pack Enforcement, and a HIPAA Angle
Hospital systems have the highest DMARC deployment rate of any category we track (92%). But only 68% enforce it. The coverage-to-enforcement gap matters more in healthcare than almost anywhere else.
4 min readResearch
Apr 28, 2026
86% of Top Universities Have DMARC. Only 28% Actually Enforce It.
Universities have a 58-point gap between deployment and enforcement, the widest of any category we track. A spoofed email from Harvard or Stanford will still be delivered.
4 min readResearch
Apr 24, 2026
State Governments Are 44 Points Behind Federal on DMARC Enforcement
Federal agencies are at 70% DMARC enforcement. State governments are at 26%. California is at p=none, New York has no record, Florida has no record. The difference is a binding directive.
4 min readResearch
Apr 21, 2026
Banks Lead DMARC Enforcement at 76%: Why Financial Services Got Ahead
76% of the top 25 US banks enforce DMARC at p=reject, the highest rate of any sector we track. Here's what the financial sector figured out that universities, governments, and media companies haven't.
4 min readResearch
Apr 17, 2026
Fortune 100 DMARC in 2026: 67% at p=reject, 13% Exposed
87% of Fortune 100 companies have DMARC. Only 67% enforce it. Disney is at p=none, Northrop Grumman has no record, and Apple is still at p=quarantine. Here's the current state.
4 min readResearch