Skip to main content

🇮🇳 Email Security in India

Weekly audit of email security across 50 listed companies headquartered in India.

50 companies analysed · Scan week: 2026-03-23

  • Listed companies headquartered in India score an average of 44/100 for email authentication and DNS security.
  • 0% of India companies achieve grades A+ or A in email security, while 54% score D or F.
  • This is 2 points above the global average of 42 across all 1601 companies in the observatory.
  • DMARC email authentication is deployed by 82% of India companies, with 60% enforcing a reject policy to prevent domain spoofing.
  • SPF records are published on 84% of analysed domains, authorizing legitimate email senders.
  • BIMI brand indicator adoption stands at 26% in India.
  • MTA-STS enforced TLS encryption is deployed by 0% of companies, securing inbound email delivery.
  • DNSSEC domain signing is active on 34% of India domains.
  • The highest-scoring company is Tata Consultancy Services with 78/100 (B).
  • Titan Company trails at 0/100, with significant room for improvement.
  • Scores range from 0 to 78 with a median of 49, showing disparate email security postures across India listed companies.

Average score

44/ 100

DMARC reject

60%

BIMI configured

26%

MTA-STS enforce

0%

DNSSEC enabled

34%

0
A+
0
A
4
B
19
C
16
D
11
F

44

Average

49

Median

0

Min

78

Max

Grade
1Tata Consultancy Servicestcs.com78B
2Bajaj Finservbajajfinserv.in70B
3HDFC Bankhdfcbank.com70B
4SBI Life Insurancesbilife.co.in70B
5Tech Mahindratechmahindra.com69C
6HCL Technologieshcltech.com68C
7Ciplacipla.com67C
8NTPCntpc.co.in67C
9Wiprowipro.com66C
10Tata Steeltatasteel.com64C
11HDFC Life Insurancehdfclife.com62C
12Mahindra & Mahindramahindra.com61C
13Larsen & Toubrolarsentoubro.com61+2C
14Maruti Suzukimarutisuzuki.com59C
15Kotak Mahindra Bankkotak.com58C
16Axis Bankaxisbank.com56C
17State Bank of Indiasbi.co.in56C
18ICICI Bankicicibank.com55C
19Adani Enterprisesadanienterprises.com54C
20Adani Portsadaniports.com54C
21Infosysinfosys.com51C
22Eicher Motorseichermotors.com51C
23Power Grid Corporationpowergrid.in51C
24BPCLbharatpetroleum.in49D
25Tata Motorstatamotors.com49D
26Apollo Hospitalsapollohospitals.com49D
27IndusInd Bankindusind.com48D
28Bharti Airtelairtel.in45+1D
29Coal Indiacoalindia.in44D
30Reliance Industriesril.com44D
31Eternalzomato.com43D
32Sun Pharmaceuticalsunpharma.com41D
33Dr. Reddy's Laboratoriesdrreddys.com41D
34Asian Paintsasianpaints.com41D
35Hero MotoCorpheromotocorp.com40D
36Shriram Financeshriramfinance.in40D
37Tata Consumer Productstataconsumer.com39D
38Nestle Indianestle.in37D
39ITCitcportal.com32-9D
40Bajaj Financebajajfinance.in23F
41Hindustan Unileverhul.co.in18F
42Trenttrentlimited.com18F
43Grasim Industriesgrasim.com14F
44Hindalco Industrieshindalco.com10F
45Britannia Industriesbritannia.co.in8F
46ONGCongcindia.com8F
47Bajaj Autobajajauto.com8F
48Bharat Electronicsbel-india.in0F
49JSW Steeljswsteel.in0F
50Titan Companytitancompany.in0F

Understanding country-level analysis

Grouping companies by country reveals how corporate email security practices vary across markets. Countries with stricter regulatory environments or more mature cybersecurity ecosystems tend to show higher average scores.

What this page shows:

  • Average score - The mean email security score across all listed companies in this country
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • DMARC reject rate - The percentage of companies enforcing strict DMARC policies
  • Company table - Individual scores, grades and key indicator status

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies grouped by country?

A: Based on the stock exchange where they are listed.


Q: What standards are checked?

A: SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC.


Q: Can I compare countries?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-country and cross-sector comparison
Email Domain CheckAudit your own domain