Skip to main content

🇨🇭 Email Security in Switzerland

Weekly audit of email security across 24 listed companies headquartered in Switzerland.

24 companies analysed · Scan week: 2026-03-23

  • Listed companies headquartered in Switzerland score an average of 53/100 for email authentication and DNS security.
  • 0% of Switzerland companies achieve grades A+ or A in email security, while 25% score D or F.
  • This is 11 points above the global average of 42 across all 1601 companies in the observatory.
  • DMARC email authentication is deployed by 100% of Switzerland companies, with 87.5% enforcing a reject policy to prevent domain spoofing.
  • SPF records are published on 96% of analysed domains, authorizing legitimate email senders.
  • BIMI brand indicator adoption stands at 8% in Switzerland.
  • MTA-STS enforced TLS encryption is deployed by 4% of companies, securing inbound email delivery.
  • DNSSEC domain signing is active on 16.7% of Switzerland domains.
  • The highest-scoring company is Kuehne+Nagel with 71/100 (B).
  • Lindt & Sprüngli trails at 38/100, with significant room for improvement.
  • Scores range from 38 to 71 with a median of 53, showing disparate email security postures across Switzerland listed companies.

Average score

53/ 100

DMARC reject

87.5%

BIMI configured

8%

MTA-STS enforce

4%

DNSSEC enabled

16.7%

0
A+
0
A
1
B
17
C
6
D
0
F

53

Average

53

Median

38

Min

71

Max

Grade
1Kuehne+Nagelkuehne-nagel.com71B
2Partners Grouppartnersgroup.com68-15C
3STMicroelectronicsst.com67C
4Rocheroche.com60C
5Richemontrichemont.com58C
6Novartisnovartis.com58C
7Julius Bärjuliusbaer.com58C
8Lonzalonza.com55C
9Zurich Insurancezurich.com55C
10Geberitgeberit.com54C
11Holcimholcim.com54C
12Givaudangivaudan.com53C
13Sikasika.com53C
14Alconalcon.com52C
15Sandozsandoz.com52C
16UBSubs.com51C
17Glencoreglencore.com51C
18Sonovasonova.com51C
19Swisscomswisscom.com48D
20Nestlénestle.com48D
21Coca-Cola HBCcoca-colahellenic.com45D
22Logitechlogitech.com44D
23ABBabb.com43D
24Lindt & Sprünglilindt.com38D

Understanding country-level analysis

Grouping companies by country reveals how corporate email security practices vary across markets. Countries with stricter regulatory environments or more mature cybersecurity ecosystems tend to show higher average scores.

What this page shows:

  • Average score - The mean email security score across all listed companies in this country
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • DMARC reject rate - The percentage of companies enforcing strict DMARC policies
  • Company table - Individual scores, grades and key indicator status

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies grouped by country?

A: Based on the stock exchange where they are listed.


Q: What standards are checked?

A: SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC.


Q: Can I compare countries?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-country and cross-sector comparison
Email Domain CheckAudit your own domain