Skip to main content
CaptainDNS
57/ 100

Zscaler Inc.

zscaler.com · 🇺🇸 US · information-technology

🇺🇸 Nasdaq 100

Scan week: 2026-10-19

  • Zscaler Inc. scores 57/100 and receives a grade of C in the Email Security Observatory.
  • This score is 13 points above the global average of 44/100, placing Zscaler Inc. among the better-protected companies.
  • Zscaler Inc. ranks #264 out of 1601 companies globally in the email security observatory.
  • The score is unchanged from last week.
  • Outbound email security - covering DMARC, SPF, DKIM and BIMI - scores 82/100 (B).
  • Inbound email protection - covering MX, MTA-STS, DANE and TLS-RPT - scores 40/100 (D).
  • DNS security (DNSSEC) scores 16/100 (F).
  • 9 recommendations have been identified to improve Zscaler Inc.'s email security posture.
  • Score history spans 6 weeks, enabling week-over-week tracking of email authentication progress.

Score

Outbound

50%
B
82/ 100
dmarc
35/40A
spf
26/30A
dkim
21/25B
bimi
0/5F

Inbound

35%
D
40/ 100
mx
40/40A
mta-sts
0/30F
dane
0/15F
tls-rpt
0/15F

DNS security

15%
F
16/ 100
dnssec
0/100F

Rankings

global

#264 / 1601

country US

#84 / 505

index nasdaq-100

#29 / 101

sector information-technology

#39 / 142

Score history

57
10-19
57
10-12
55
03-23
55
03-16
55
03-09
55
03-02

Recommendations

Highdnssec

Enable DNSSEC for your domain to improve DNS security

Mediumspf

Switch to -all (hardfail) for strict SPF enforcement

Mediumdkim

observatory.rec.upgrade_weak_selector

Mediummta-sts

Deploy MTA-STS to enforce TLS for inbound email

Lowbimi

Add a BIMI record with your logo to improve brand visibility in inboxes

Lowmx

observatory.rec.mx_smtp_check

Lowmx

observatory.rec.mx_ip_blacklist_oneshot

Lowtls-rpt

Add a TLS-RPT record to receive TLS failure reports

Lowcaa

observatory.rec.caa_no_iodef

Understanding the company audit

Each company in the Observatory is analyzed weekly for email authentication standards. The audit provides a comprehensive view of the company's email security posture.

What this page shows:

  • Total score - A score out of 100 reflecting overall email security maturity
  • Letter grade - From A+ (excellent) to F (significant gaps)
  • Per-standard analysis - Individual scores for SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC
  • Recommendations - Prioritized steps to improve the score

Standards evaluated

  1. SPF - Sender Policy Framework prevents unauthorized servers from sending email on behalf of the domain
  2. DKIM - DomainKeys Identified Mail ensures emails are signed and unaltered during transit
  3. DMARC - Domain-based Message Authentication, Reporting and Conformance ties SPF and DKIM together with a policy
  4. BIMI - Brand Indicators for Message Identification displays the brand logo in supporting email clients
  5. MTA-STS - Mail Transfer Agent Strict Transport Security enforces TLS encryption for inbound email
  6. DNSSEC - Domain Name System Security Extensions prevent DNS spoofing attacks

FAQ - Frequently asked questions

Q: How is the score calculated?

A: Points are awarded for each standard based on configuration quality, totaling up to 100.

Q: What do the grades mean?

A: A+ is excellent (90-100), F indicates significant gaps (below 50).

PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-index and cross-sector comparison
Email Domain CheckAudit your own domain