Skip to main content

🇮🇪 Email Security in Ireland

Weekly audit of email security across 6 listed companies headquartered in Ireland.

6 companies analysed · Scan week: 2026-03-23

  • Listed companies headquartered in Ireland score an average of 51/100 for email authentication and DNS security.
  • 0% of Ireland companies achieve grades A+ or A in email security, while 50% score D or F.
  • This is 9 points above the global average of 42 across all 1601 companies in the observatory.
  • DMARC email authentication is deployed by 100% of Ireland companies, with 100% enforcing a reject policy to prevent domain spoofing.
  • SPF records are published on 100% of analysed domains, authorizing legitimate email senders.
  • BIMI brand indicator adoption stands at 0% in Ireland.
  • MTA-STS enforced TLS encryption is deployed by 0% of companies, securing inbound email delivery.
  • DNSSEC domain signing is active on 16.7% of Ireland domains.
  • The highest-scoring company is CRH with 70/100 (B).
  • PDD Holdings Inc. trails at 38/100, with significant room for improvement.
  • Scores range from 38 to 70 with a median of 52, showing disparate email security postures across Ireland listed companies.

Average score

51/ 100

DMARC reject

100%

BIMI configured

0%

MTA-STS enforce

0%

DNSSEC enabled

16.7%

0
A+
0
A
1
B
2
C
3
D
0
F

51

Average

52

Median

38

Min

70

Max

Grade
1CRHcrh.com70B
2Flutter Entertainmentflutter.com57C
3Experianexperian.com55C
4Smurfit Westrocksmurfitwestrock.com49D
5DCCdcc.ie39D
6PDD Holdings Inc.pddholdings.com38D

Understanding country-level analysis

Grouping companies by country reveals how corporate email security practices vary across markets. Countries with stricter regulatory environments or more mature cybersecurity ecosystems tend to show higher average scores.

What this page shows:

  • Average score - The mean email security score across all listed companies in this country
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • DMARC reject rate - The percentage of companies enforcing strict DMARC policies
  • Company table - Individual scores, grades and key indicator status

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies grouped by country?

A: Based on the stock exchange where they are listed.


Q: What standards are checked?

A: SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC.


Q: Can I compare countries?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-country and cross-sector comparison
Email Domain CheckAudit your own domain