Skip to main content
CaptainDNS
86/ 100

Fresenius

fresenius.com · 🇩🇪 DE · healthcare

🇩🇪 DAX 40

Scan week: 2026-10-26

  • Fresenius scores 86/100 and receives a grade of A in the Email Security Observatory.
  • This score is 42 points above the global average of 44/100, placing Fresenius among the better-protected companies.
  • Fresenius ranks #4 out of 1601 companies globally in the email security observatory.
  • The score is unchanged from last week.
  • Outbound email security - covering DMARC, SPF, DKIM and BIMI - scores 87/100 (A).
  • Inbound email protection - covering MX, MTA-STS, DANE and TLS-RPT - scores 81/100 (B).
  • DNS security (DNSSEC) scores 96/100 (A+).
  • 7 recommendations have been identified to improve Fresenius's email security posture.
  • Score history spans 7 weeks, enabling week-over-week tracking of email authentication progress.

Score

Outbound

50%
A
87/ 100
dmarc
35/40A
spf
30/30A
dkim
22/25A
bimi
0/5F

Inbound

35%
B
81/ 100
mx
40/40A
mta-sts
27/30A
dane
0/15F
tls-rpt
14/15A

DNS security

15%
A+
96/ 100
dnssec
80/100B

Rankings

global

#4 / 1601

country DE

#2 / 38

index dax-40

#2 / 40

sector healthcare

#1 / 123

Score history

86
10-26
86
10-19
86
10-12
81
03-23
81
03-16
81
03-09
81
03-02

Recommendations

Mediumdkim

observatory.rec.upgrade_weak_selector

Mediummta-sts

Switch MTA-STS from testing to enforce mode

Lowbimi

Add a BIMI record with your logo to improve brand visibility in inboxes

Lowmx

observatory.rec.mx_smtp_check

Lowmx

observatory.rec.mx_ip_blacklist_oneshot

Lowdane

Add DANE/TLSA records to authenticate your MX certificates via DNS

Lowcaa

observatory.rec.caa_no_iodef

Understanding the company audit

Each company in the Observatory is analyzed weekly for email authentication standards. The audit provides a comprehensive view of the company's email security posture.

What this page shows:

  • Total score - A score out of 100 reflecting overall email security maturity
  • Letter grade - From A+ (excellent) to F (significant gaps)
  • Per-standard analysis - Individual scores for SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC
  • Recommendations - Prioritized steps to improve the score

Standards evaluated

  1. SPF - Sender Policy Framework prevents unauthorized servers from sending email on behalf of the domain
  2. DKIM - DomainKeys Identified Mail ensures emails are signed and unaltered during transit
  3. DMARC - Domain-based Message Authentication, Reporting and Conformance ties SPF and DKIM together with a policy
  4. BIMI - Brand Indicators for Message Identification displays the brand logo in supporting email clients
  5. MTA-STS - Mail Transfer Agent Strict Transport Security enforces TLS encryption for inbound email
  6. DNSSEC - Domain Name System Security Extensions prevent DNS spoofing attacks

FAQ - Frequently asked questions

Q: How is the score calculated?

A: Points are awarded for each standard based on configuration quality, totaling up to 100.

Q: What do the grades mean?

A: A+ is excellent (90-100), F indicates significant gaps (below 50).

PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-index and cross-sector comparison
Email Domain CheckAudit your own domain