Skip to main content
CaptainDNS
66/ 100

PayPal

paypal.com · 🇺🇸 US · financials

🇺🇸 S&P 500🇺🇸 Nasdaq 100

Scan week: 2026-10-19

  • PayPal scores 66/100 and receives a grade of C in the Email Security Observatory.
  • This score is 22 points above the global average of 44/100, placing PayPal among the better-protected companies.
  • PayPal ranks #95 out of 1601 companies globally in the email security observatory.
  • The score is unchanged from last week.
  • Outbound email security - covering DMARC, SPF, DKIM and BIMI - scores 78/100 (B).
  • Inbound email protection - covering MX, MTA-STS, DANE and TLS-RPT - scores 36/100 (D).
  • DNS security (DNSSEC) scores 96/100 (A+).
  • 9 recommendations have been identified to improve PayPal's email security posture.
  • Score history spans 6 weeks, enabling week-over-week tracking of email authentication progress.

Score

Outbound

50%
B
78/ 100
dmarc
35/40A
spf
21/30B
dkim
18/25B
bimi
4/5B

Inbound

35%
D
36/ 100
mx
36/40A
mta-sts
0/30F
dane
0/15F
tls-rpt
0/15F

DNS security

15%
A+
96/ 100
dnssec
80/100B

Rankings

global

#95 / 1601

country US

#33 / 505

index sp-500

#33 / 502

index nasdaq-100

#15 / 101

sector financials

#23 / 222

Score history

66
10-19
64
10-12
72
03-23
72
03-16
72
03-09
72
03-02

Recommendations

Mediumspf

Switch to -all (hardfail) for strict SPF enforcement

Mediumdkim

observatory.rec.upgrade_weak_selector

Mediummta-sts

Deploy MTA-STS to enforce TLS for inbound email

Lowmx

observatory.rec.mx_no_ipv6

Lowmx

observatory.rec.mx_smtp_check

Lowmx

observatory.rec.mx_ip_blacklist_oneshot

Lowtls-rpt

Add a TLS-RPT record to receive TLS failure reports

Lowdane

Add DANE/TLSA records to authenticate your MX certificates via DNS

Lowcaa

observatory.rec.caa_no_iodef

Understanding the company audit

Each company in the Observatory is analyzed weekly for email authentication standards. The audit provides a comprehensive view of the company's email security posture.

What this page shows:

  • Total score - A score out of 100 reflecting overall email security maturity
  • Letter grade - From A+ (excellent) to F (significant gaps)
  • Per-standard analysis - Individual scores for SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC
  • Recommendations - Prioritized steps to improve the score

Standards evaluated

  1. SPF - Sender Policy Framework prevents unauthorized servers from sending email on behalf of the domain
  2. DKIM - DomainKeys Identified Mail ensures emails are signed and unaltered during transit
  3. DMARC - Domain-based Message Authentication, Reporting and Conformance ties SPF and DKIM together with a policy
  4. BIMI - Brand Indicators for Message Identification displays the brand logo in supporting email clients
  5. MTA-STS - Mail Transfer Agent Strict Transport Security enforces TLS encryption for inbound email
  6. DNSSEC - Domain Name System Security Extensions prevent DNS spoofing attacks

FAQ - Frequently asked questions

Q: How is the score calculated?

A: Points are awarded for each standard based on configuration quality, totaling up to 100.

Q: What do the grades mean?

A: A+ is excellent (90-100), F indicates significant gaps (below 50).

PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-index and cross-sector comparison
Email Domain CheckAudit your own domain