Skip to main content

🇲🇽 Email Security in Mexico

Weekly audit of email security across 1 listed companies headquartered in Mexico.

1 companies analysed · Scan week: 2026-03-23

  • Listed companies headquartered in Mexico score an average of 45/100 for email authentication and DNS security.
  • 0% of Mexico companies achieve grades A+ or A in email security, while 100% score D or F.
  • This is 3 points above the global average of 42 across all 1601 companies in the observatory.
  • DMARC email authentication is deployed by 100% of Mexico companies, with 0% enforcing a reject policy to prevent domain spoofing.
  • SPF records are published on 100% of analysed domains, authorizing legitimate email senders.
  • BIMI brand indicator adoption stands at 0% in Mexico.
  • MTA-STS enforced TLS encryption is deployed by 0% of companies, securing inbound email delivery.
  • DNSSEC domain signing is active on 0% of Mexico domains.
  • The highest-scoring company is Fresnillo with 45/100 (D).
  • Scores range from 45 to 45 with a median of 45, showing disparate email security postures across Mexico listed companies.

Average score

45/ 100

DMARC reject

0%

BIMI configured

0%

MTA-STS enforce

0%

DNSSEC enabled

0%

0
A+
0
A
0
B
0
C
1
D
0
F

45

Average

45

Median

45

Min

45

Max

Grade
1Fresnillofresnilloplc.com45+28D

Understanding country-level analysis

Grouping companies by country reveals how corporate email security practices vary across markets. Countries with stricter regulatory environments or more mature cybersecurity ecosystems tend to show higher average scores.

What this page shows:

  • Average score - The mean email security score across all listed companies in this country
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • DMARC reject rate - The percentage of companies enforcing strict DMARC policies
  • Company table - Individual scores, grades and key indicator status

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies grouped by country?

A: Based on the stock exchange where they are listed.


Q: What standards are checked?

A: SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC.


Q: Can I compare countries?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-country and cross-sector comparison
Email Domain CheckAudit your own domain