How are companies within an index scored?

Each company's primary domain is analyzed for SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC. Points are awarded for each standard based on its quality and strictness, totaling up to 100.

What does the grade distribution tell me?

The grade distribution shows the spread of scores across all companies in the index. If most companies score A or A+, the index has strong overall email security. A wide spread from A+ to F indicates significant variation.

Why might a well-known company score poorly?

Email security configuration is often managed independently from other cybersecurity controls. A company may have strong network security but still lack proper DMARC enforcement or MTA-STS deployment.

How often are scores updated?

All domains are rescanned weekly. Changes in DNS records are reflected in the next weekly scan.

CaptainDNS

DNS Lookup

Choose a DNS record type to search for.

Propagation & diagnostics

Compare resolvers worldwide and inspect returned answers.

Propagation testPublic resolvers, remaining TTLs, divergent responses.
Domain DNS auditParent/local NS, authority and response times.
DNSSEC CheckerValidate chain of trust, DS records and signing keys.
API & integrations
Keep history, monitor your zones and automate recurring checks.

Email authentication

Tools to verify and validate your email authentication setup.

Syntax validation

Record inspectors

Generators

Deliverability

Email deliverability audit

Audit MX, SPF, DKIM and DMARC to confirm a domain is ready to send.

Mail header analyzer

Decode participants, authentication results and routing from raw headers.

Email tester

Send a test email and get instant authentication and deliverability feedback.

IP Blacklist Checker

Check if your IP is on email blacklists

Domain Blacklist Checker

Check if your domain is on URI blacklists

SPF Flattener

Flatten SPF records to reduce DNS lookups below the 10-lookup limit.

DKIM Selector Finder

Auto-discover all DKIM selectors for a domain via DNS brute-force.

SMTP/MX Tester

Test SMTP connectivity of your MX servers: banner, STARTTLS, TLS certificate, open relay.

IP tools

Quickly inspect an IP address or your own connection.

Text

Transform and measure your content in seconds.

Text case converter

Convert any block of text to upper or lower case instantly.

Slug generator

Transform any sentence into an SEO-friendly slug in seconds.

Word & character counter

Measure the length of any text, with instant word and character counts.

Password generator

Generate strong random passwords and memorable passphrases instantly.

Developer

Encoding, hashing, regex and formatting for everyday dev work.

Base64 encoder / decoder

Encode or decode any content in Base64 without leaving the browser.

Hash Generator

Compute MD5, SHA-1, SHA-256 and SHA-512 hashes of any text.

URL encoder / decoder

Encode or decode text using percent-encoding (RFC 3986) right in your browser.

Regex Tester

Test a regular expression against text and visualize matches.

JSON / YAML Formatter

Format, validate and convert JSON and YAML in one click.

Web & Certificates

BIMI logos, VMC/CSR certificates and web page diagnostics.

BIMI logo lookup

Inspect a BIMI logo URL - format, metadata and live rendering - before rollout.

BIMI SVG converter

Convert any SVG to BIMI-compliant Tiny-PS format in seconds.

CSR parser

Inspect a CSR, extract subject details, fingerprints and requested SANs.

VMC inspector

Inspect a Verified Mark Certificate - issuer, validity and SAN coverage - before you publish BIMI.

Page size checker

Check if your page exceeds Google's 2 MB crawl limit.

Phishing URL Checker

Check if a URL is flagged as phishing or malware by 4 threat intelligence sources.

🇩🇪 DAX 40 Email Security

Weekly audit of email security across 40 companies in the DAX 40.

Deutsche Börse · 40 companies analysed · Scan week: 2026-03-02

Average score

55/ 100

DMARC reject

65%

BIMI configured

20%

MTA-STS enforce

18%

DNSSEC enabled

25%

A+

Average

Median

Min

Max

Company

		Country		Grade	DMARC	SPF	BIMI	MTA-STS	DNSSEC
1	Beiersdorfbeiersdorf.com	🇩🇪 Germany	87	A	reject	-all	✓	✓	✓
2	Freseniusfresenius.com	🇩🇪 Germany	81	B	reject	-all	✗	✓	✓
3	Vonoviavonovia.de	🇩🇪 Germany	81	B	reject	-all	✗	✓	✓
4	Heidelberg Materialsheidelbergmaterials.com	🇩🇪 Germany	75	B	reject	-all	✗	✓	✗
5	Münchener Rück (Munich Re)munichre.com	🇩🇪 Germany	73	B	reject	-all	✗	✗	✓
6	BASFbasf.com	🇩🇪 Germany	70	B	reject	-all	✓	✓	✗
7	Merck KGaAmerckgroup.com	🇩🇪 Germany	70	B	reject	~all	✗	✗	✓
8	Commerzbankcommerzbank.com	🇩🇪 Germany	70	B	reject	-all	✓	✓	✗
9	Sartoriussartorius.com	🇩🇪 Germany	64	C	reject	-all	✓	✓	✓
10	Henkelhenkel.com	🇩🇪 Germany	64	C	quarantine	-all	✗	✓	✗
11	Porsche AGporsche.com	🇩🇪 Germany	63	C	reject	-all	✓	✗	✓
12	Allianzallianz.com	🇩🇪 Germany	60	C	reject	~all	✗	✓	✗
13	Covestrocovestro.com	🇩🇪 Germany	59	C	none	~all	✗	✓	✗
14	Siemenssiemens.com	🇩🇪 Germany	58	C	reject	-all	✓	✗	✓
15	Airbusairbus.com	🇳🇱 Netherlands	58	C	reject	-all	✗	✗	✗
16	SAPsap.com	🇩🇪 Germany	58	C	reject	-all	✗	✗	✗
17	Brenntagbrenntag.com	🇩🇪 Germany	56	C	reject	~all	✗	✗	✗
18	BMWbmwgroup.com	🇩🇪 Germany	55	C	quarantine	-all	✗	✗	✗
19	Deutsche Bankdb.com	🇩🇪 Germany	55	C	reject	~all	✗	✗	✗
20	MTU Aero Enginesmtu.de	🇩🇪 Germany	55	C	none	-all	✗	✗	✗
21	Porsche SEporsche-se.com	🇩🇪 Germany	54	C	none	-all	✗	✗	✓
22	Siemens Energysiemens-energy.com	🇩🇪 Germany	54	C	reject	-all	✗	✗	✗
23	Qiagenqiagen.com	🇳🇱 Netherlands	52	C	reject	~all	✓	✓	✗
24	Siemens Healthineerssiemens-healthineers.com	🇩🇪 Germany	52	C	reject	-all	✗	✗	✗
25	RWErwe.com	🇩🇪 Germany	52	C	reject	-all	✗	✗	✗
26	Zalandozalando.de	🇩🇪 Germany	51	C	none	~all	✓	✗	✗
27	Deutsche Börsedeutsche-boerse.com	🇩🇪 Germany	51	C	reject	-all	✗	✗	✗
28	Adidasadidas-group.com	🇩🇪 Germany	51	C	reject	~all	✗	✗	✗
29	Symrisesymrise.com	🇩🇪 Germany	49	D	reject	~all	✗	✗	✗
30	Daimler Truckdaimlertruck.com	🇩🇪 Germany	48	D	quarantine	-all	✗	✗	✗
31	Deutsche Post (DHL)dpdhl.com	🇩🇪 Germany	48	D	reject	~all	✗	✗	✗
32	Deutsche Telekomtelekom.com	🇩🇪 Germany	46	D	quarantine	~all	✗	✗	✗
33	Continentalcontinental.com	🇩🇪 Germany	45	D	none	-all	✗	✗	✗
34	Infineoninfineon.com	🇩🇪 Germany	43	D	none	~all	✗	✗	✗
35	Deutsche Lufthansalufthansagroup.com	🇩🇪 Germany	43	D	reject	—	✗	✗	✓
36	Mercedes-Benzmercedes-benz.com	🇩🇪 Germany	43	D	reject	~all	✗	✗	✗
37	E.ONeon.com	🇩🇪 Germany	41	D	quarantine	-all	✗	✓	✗
38	Hannover Rehannover-re.com	🇩🇪 Germany	40	D	none	-all	✗	✗	✗
39	Bayerbayer.com	🇩🇪 Germany	31	D	none	-all	✗	✗	✗
40	Rheinmetallrheinmetall.com	🇩🇪 Germany	27	F	none	~all	✗	✗	✗

Understanding index-level analysis

A stock index groups the largest companies in a market. Analyzing their email security provides a representative snapshot of how a country's or region's corporate sector protects against email-based threats.

What this page shows:

Average score - The mean email security score across all constituent companies
Grade distribution - How many companies fall into each grade bracket (A+ through F)
Company table - Individual scores, grades and key indicator status for each company
Sector breakdown - How different industries within the index compare

Key standards tracked

Each company is evaluated on:

SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
DKIM - Are signing keys published and strong enough (2048-bit minimum)?
DMARC - Is a policy in place? Is it set to quarantine or reject?
BIMI - Is the brand logo published for inbox display?
MTA-STS - Is inbound email transport encryption enforced?
DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies scored?

A: Each domain is analyzed for email authentication standards and awarded up to 100 points across three pillars.

Q: What does the grade distribution show?

A: The spread of scores from A+ to F, indicating overall index maturity.

Q: Can I compare indices?

A: Yes, via the Statistics page.

Page	Purpose
Observatory Dashboard	Overall overview with key metrics
Statistics	Cross-index and cross-sector comparison
Email Domain Check	Audit your own domain

🇩🇪 DAX 40 Email Security

Company

Understanding index-level analysis

Key standards tracked

FAQ - Frequently asked questions

Related pages