Skip to main content

🇳🇱 Email Security in Netherlands

Weekly audit of email security across 26 listed companies headquartered in Netherlands.

26 companies analysed · Scan week: 2026-03-23

  • Listed companies headquartered in Netherlands score an average of 56/100 for email authentication and DNS security.
  • 0% of Netherlands companies achieve grades A+ or A in email security, while 27% score D or F.
  • This is 14 points above the global average of 42 across all 1601 companies in the observatory.
  • DMARC email authentication is deployed by 100% of Netherlands companies, with 84.6% enforcing a reject policy to prevent domain spoofing.
  • SPF records are published on 100% of analysed domains, authorizing legitimate email senders.
  • BIMI brand indicator adoption stands at 19% in Netherlands.
  • MTA-STS enforced TLS encryption is deployed by 0% of companies, securing inbound email delivery.
  • DNSSEC domain signing is active on 38.5% of Netherlands domains.
  • The highest-scoring company is ABN AMRO with 82/100 (B).
  • Wolters Kluwer trails at 36/100, with significant room for improvement.
  • Scores range from 36 to 82 with a median of 57, showing disparate email security postures across Netherlands listed companies.

Average score

56/ 100

DMARC reject

84.6%

BIMI configured

19%

MTA-STS enforce

0%

DNSSEC enabled

38.5%

0
A+
0
A
2
B
17
C
7
D
0
F

56

Average

57

Median

36

Min

82

Max

Grade
1ABN AMROabnamro.com82B
2IMCDimcdgroup.com74B
3Stellantisstellantis.com69C
4ASR Nederlandasrnederland.nl68C
5ASMLasml.com67C
6ASML Holdingasml.com67C
7NN Groupnn-group.com66C
8Heinekentheheinekencompany.com61+2C
9Just Eat Takeawayjusteattakeaway.com60C
10Adyenadyen.com59+2C
11Randstadrandstad.com59C
12Aegonaegon.com58C
13Airbusairbus.com58C
14Signifysignify.com56+2C
15Exorexor.com55C
16Philipsphilips.com54C
17ING Grouping.com53C
18DSM-Firmenichdsm-firmenich.com52C
19Qiagenqiagen.com52C
20Universal Music Groupuniversalmusic.com49D
21Ferrovial SEferrovial.com49D
22Akzo Nobelakzonobel.com49D
23Prosusprosus.com43D
24Besibesi.com41D
25Ahold Delhaizeaholddelhaize.com38D
26Wolters Kluwerwolterskluwer.com36D

Understanding country-level analysis

Grouping companies by country reveals how corporate email security practices vary across markets. Countries with stricter regulatory environments or more mature cybersecurity ecosystems tend to show higher average scores.

What this page shows:

  • Average score - The mean email security score across all listed companies in this country
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • DMARC reject rate - The percentage of companies enforcing strict DMARC policies
  • Company table - Individual scores, grades and key indicator status

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies grouped by country?

A: Based on the stock exchange where they are listed.


Q: What standards are checked?

A: SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC.


Q: Can I compare countries?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-country and cross-sector comparison
Email Domain CheckAudit your own domain