Skip to main content

🇬🇧 Email Security in United Kingdom

Weekly audit of email security across 93 listed companies headquartered in United Kingdom.

93 companies analysed · Scan week: 2026-03-23

  • Listed companies headquartered in United Kingdom score an average of 46/100 for email authentication and DNS security.
  • 0% of United Kingdom companies achieve grades A+ or A in email security, while 49% score D or F.
  • This is 4 points above the global average of 42 across all 1601 companies in the observatory.
  • DMARC email authentication is deployed by 90.3% of United Kingdom companies, with 57% enforcing a reject policy to prevent domain spoofing.
  • SPF records are published on 92% of analysed domains, authorizing legitimate email senders.
  • BIMI brand indicator adoption stands at 8% in United Kingdom.
  • MTA-STS enforced TLS encryption is deployed by 3% of companies, securing inbound email delivery.
  • DNSSEC domain signing is active on 8.6% of United Kingdom domains.
  • The highest-scoring company is Shell with 72/100 (B).
  • InterContinental Hotels trails at 0/100, with significant room for improvement.
  • Scores range from 0 to 72 with a median of 51, showing disparate email security postures across United Kingdom listed companies.

Average score

46/ 100

DMARC reject

57%

BIMI configured

8%

MTA-STS enforce

3%

DNSSEC enabled

8.6%

0
A+
0
A
1
B
46
C
36
D
10
F

46

Average

51

Median

0

Min

72

Max

Grade
1Shellshell.com72B
2Unileverunilever.com67C
3Croda Internationalcroda.com64C
4DS Smithdssmith.com64C
5Diageodiageo.com63C
6Intertekintertek.com63C
7National Gridnationalgrid.com62+2C
83i Group3i.com62C
9Avivaaviva.com60C
10St. James's Placesjp.co.uk60C
11Mondimondigroup.com59C
12Admiral Groupadmiralgroup.co.uk59C
13Ashtead Groupashtead-group.com58C
14SSEsse.com58C
15Schrodersschroders.com58C
16BT Groupbt.com58C
17Ocadoocadogroup.com58C
18Haleonhaleon.com58C
19Severn Trentseverntrent.com57C
20Land Securitieslandsec.com57C
21Babcock Internationalbabcockinternational.com56C
22Marks & Spencermarksandspencer.com56C
23Barratt Developmentsbarrattdevelopments.co.uk55C
24GSKgsk.com55C
25Nextnextplc.co.uk55C
26Standard Charteredsc.com55C
27IMIimiplc.com55C
28Vodafonevodafone.com55C
29HSBChsbc.com55C
30WPPwpp.com55C
31Pearsonpearson.com55C
32Hargreaves Lansdownhl.co.uk54C
33Kingfisherkingfisher.com54C
34BAE Systemsbaesystems.com53C
35Hikma Pharmaceuticalshikma.com53C
36Melrose Industriesmelroseplc.net53+6C
37Phoenix Groupthephoenixgroup.com53C
38Prudentialprudentialplc.com53+1C
39Smith & Nephewsmith-nephew.com53C
40Intermediate Capital Groupicgam.com52C
41M&Gmandg.com52C
42RELXrelx.com52C
43Segrosegro.com52C
44Spirax Groupspiraxgroup.com52C
45Bunzlbunzl.com51C
46Beazleybeazley.com51C
47Johnson Mattheymatthey.com51C
48Centricacentrica.com49D
49Halmahalma.com49D
50easyJeteasyjet.com49D
51Reckitt Benckiserreckitt.com48D
52AstraZenecaastrazeneca.com48D
53Barclayshome.barclays48D
54Smiths Groupsmiths.com48+2D
55Sage Groupsage.com48D
56NatWest Groupnatwestgroup.com47D
57Legal & Generallegalandgeneral.com47D
58Arm Holdings plcarm.com46D
59Rightmoverightmove.co.uk46D
60British Landbritishland.com45D
61Rentokil Initialrentokil-initial.com44D
62British American Tobaccobat.com44D
63BPbp.com44D
64Whitbreadwhitbread.co.uk44D
65Persimmonpersimmonhomes.com43D
66JD Sportsjdplc.com43D
67Howden Joineryhowdenjoinerygroupplc.com42D
68Informainforma.com41D
69ConvaTecconvatecgroup.com41D
70Rolls-Roycerolls-royce.com41D
71London Stock Exchange Grouplseg.com41D
72Anglo Americanangloamerican.com41D
73Endeavour Miningendeavourmining.com40D
74Tescotescoplc.com40D
75Rio Tintoriotinto.com39D
76Diplomadiplomaplc.com37D
77Compass Groupcompass-group.com36D
78Entainentaingroup.com36D
79Imperial Brandsimperialbrandsplc.com35D
80United Utilitiesunitedutilities.com34D
81Berkeley Groupberkeleygroup.co.uk33D
82Associated British Foodsabf.co.uk33D
83Taylor Wimpeytaylorwimpey.co.uk31D
84Antofagastaantofagasta.co.uk29F
85Weir Groupweir.co.uk23F
86Sainsbury'scorporate.sainsburys.co.uk18F
87Auto Traderplc.autotrader.co.uk18F
88Lloyds Banking Grouplloydsbankinggroup.com18F
89Hiscoxhiscoxgroup.com14F
90Games Workshopgames-workshop.com10F
91Coca-Cola Europacific Partners PLCcocacolaep.com8F
92Burberryburberryplc.com0F
93InterContinental Hotelsihgplc.com0F

Understanding country-level analysis

Grouping companies by country reveals how corporate email security practices vary across markets. Countries with stricter regulatory environments or more mature cybersecurity ecosystems tend to show higher average scores.

What this page shows:

  • Average score - The mean email security score across all listed companies in this country
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • DMARC reject rate - The percentage of companies enforcing strict DMARC policies
  • Company table - Individual scores, grades and key indicator status

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies grouped by country?

A: Based on the stock exchange where they are listed.


Q: What standards are checked?

A: SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC.


Q: Can I compare countries?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-country and cross-sector comparison
Email Domain CheckAudit your own domain