Understanding country-level analysis
Grouping companies by country reveals how corporate email security practices vary across markets. Countries with stricter regulatory environments or more mature cybersecurity ecosystems tend to show higher average scores.
What this page shows:
- Average score - The mean email security score across all listed companies in this country
- Grade distribution - How many companies fall into each grade bracket (A+ through F)
- DMARC reject rate - The percentage of companies enforcing strict DMARC policies
- Company table - Individual scores, grades and key indicator status
Key standards tracked
Each company is evaluated on:
- SPF - Is the sending policy properly configured? Does it use
-all(hard fail)? - DKIM - Are signing keys published and strong enough (2048-bit minimum)?
- DMARC - Is a policy in place? Is it set to
quarantineorreject? - BIMI - Is the brand logo published for inbox display?
- MTA-STS - Is inbound email transport encryption enforced?
- DNSSEC - Is the DNS zone signed to prevent spoofing?
FAQ - Frequently asked questions
Q: How are companies grouped by country?
A: Based on the stock exchange where they are listed.
Q: What standards are checked?
A: SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC.
Q: Can I compare countries?
A: Yes, via the Statistics page.
Related pages
| Page | Purpose |
|---|---|
| Observatory Dashboard | Overall overview with key metrics |
| Statistics | Cross-country and cross-sector comparison |
| Email Domain Check | Audit your own domain |