Skip to main content

🇬🇧 FTSE 100 Email Security

Weekly audit of email security across 100 companies in the FTSE 100.

London Stock Exchange · 100 companies analysed · Scan week: 2026-03-23

  • Companies listed in the FTSE 100 score an average of 47/100 for email security this week.
  • 0% of FTSE 100 companies achieve a grade of A+ or A in email authentication, while 48% receive a D or F.
  • The average score of 47 is 5 points above the global average of 42, indicating stronger-than-average email security practices.
  • 92% of FTSE 100 companies have deployed DMARC email authentication, and 61% enforce a strict reject policy to block spoofed emails.
  • SPF record deployment stands at 94%, authorizing legitimate sending servers and helping prevent email spoofing.
  • 7% of companies have configured BIMI to display their verified brand logo in supported email clients.
  • 3% enforce TLS encryption for inbound email delivery via MTA-STS, protecting against downgrade attacks.
  • DNSSEC is enabled on 9% of FTSE 100 domains, adding cryptographic validation to DNS queries.
  • Shell leads the FTSE 100 with a top score of 72/100 (B).
  • InterContinental Hotels has the lowest score at 0/100, indicating significant gaps in email security configuration.
  • Scores range from 0 to 72 with a median of 51, reflecting varied levels of email security maturity across the index.

Average score

47/ 100

DMARC reject

61%

BIMI configured

7%

MTA-STS enforce

3%

DNSSEC enabled

9%

0
A+
0
A
2
B
50
C
39
D
9
F

47

Average

51

Median

0

Min

72

Max

Company

Grade
1Shellshell.com72B
2CRHcrh.com70B
3Unileverunilever.com67C
4Croda Internationalcroda.com64C
5DS Smithdssmith.com64C
6Diageodiageo.com63C
7Intertekintertek.com63C
8National Gridnationalgrid.com62+2C
93i Group3i.com62C
10Avivaaviva.com60C
11St. James's Placesjp.co.uk60C
12Mondimondigroup.com59C
13Admiral Groupadmiralgroup.co.uk59C
14Ashtead Groupashtead-group.com58C
15SSEsse.com58C
16Schrodersschroders.com58C
17BT Groupbt.com58C
18Ocadoocadogroup.com58C
19Haleonhaleon.com58C
20Severn Trentseverntrent.com57C
21Land Securitieslandsec.com57C
22Flutter Entertainmentflutter.com57C
23Babcock Internationalbabcockinternational.com56C
24Marks & Spencermarksandspencer.com56C
25Barratt Developmentsbarrattdevelopments.co.uk55C
26GSKgsk.com55C
27Nextnextplc.co.uk55C
28Standard Charteredsc.com55C
29IMIimiplc.com55C
30Vodafonevodafone.com55C
31HSBChsbc.com55C
32WPPwpp.com55C
33Experianexperian.com55C
34Pearsonpearson.com55C
35Hargreaves Lansdownhl.co.uk54C
36Kingfisherkingfisher.com54C
37BAE Systemsbaesystems.com53C
38Hikma Pharmaceuticalshikma.com53C
39Melrose Industriesmelroseplc.net53+6C
40Phoenix Groupthephoenixgroup.com53C
41Prudentialprudentialplc.com53+1C
42Smith & Nephewsmith-nephew.com53C
43Intermediate Capital Groupicgam.com52C
44International Consolidated Airlines Groupiairgroup.com52C
45M&Gmandg.com52C
46RELXrelx.com52C
47Segrosegro.com52C
48Spirax Groupspiraxgroup.com52C
49Bunzlbunzl.com51C
50Beazleybeazley.com51C
51Glencoreglencore.com51C
52Johnson Mattheymatthey.com51C
53Centricacentrica.com49D
54Smurfit Westrocksmurfitwestrock.com49D
55Halmahalma.com49D
56easyJeteasyjet.com49D
57Reckitt Benckiserreckitt.com48D
58AstraZenecaastrazeneca.com48D
59Barclayshome.barclays48D
60Smiths Groupsmiths.com48+2D
61Sage Groupsage.com48D
62NatWest Groupnatwestgroup.com47D
63Legal & Generallegalandgeneral.com47D
64Rightmoverightmove.co.uk46D
65Fresnillofresnilloplc.com45+28D
66British Landbritishland.com45D
67Coca-Cola HBCcoca-colahellenic.com45D
68Rentokil Initialrentokil-initial.com44D
69British American Tobaccobat.com44D
70BPbp.com44D
71Whitbreadwhitbread.co.uk44D
72Persimmonpersimmonhomes.com43D
73JD Sportsjdplc.com43D
74Howden Joineryhowdenjoinerygroupplc.com42D
75Informainforma.com41D
76ConvaTecconvatecgroup.com41D
77Rolls-Roycerolls-royce.com41D
78London Stock Exchange Grouplseg.com41D
79Anglo Americanangloamerican.com41D
80Endeavour Miningendeavourmining.com40D
81Tescotescoplc.com40D
82DCCdcc.ie39D
83Rio Tintoriotinto.com39D
84Diplomadiplomaplc.com37D
85Compass Groupcompass-group.com36D
86Entainentaingroup.com36D
87Imperial Brandsimperialbrandsplc.com35D
88United Utilitiesunitedutilities.com34D
89Berkeley Groupberkeleygroup.co.uk33D
90Associated British Foodsabf.co.uk33D
91Taylor Wimpeytaylorwimpey.co.uk31D
92Antofagastaantofagasta.co.uk29F
93Weir Groupweir.co.uk23F
94Sainsbury'scorporate.sainsburys.co.uk18F
95Auto Traderplc.autotrader.co.uk18F
96Lloyds Banking Grouplloydsbankinggroup.com18F
97Hiscoxhiscoxgroup.com14F
98Games Workshopgames-workshop.com10F
99Burberryburberryplc.com0F
100InterContinental Hotelsihgplc.com0F

Understanding index-level analysis

A stock index groups the largest companies in a market. Analyzing their email security provides a representative snapshot of how a country's or region's corporate sector protects against email-based threats.

What this page shows:

  • Average score - The mean email security score across all constituent companies
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • Company table - Individual scores, grades and key indicator status for each company
  • Sector breakdown - How different industries within the index compare

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies scored?

A: Each domain is analyzed for email authentication standards and awarded up to 100 points across three pillars.


Q: What does the grade distribution show?

A: The spread of scores from A+ to F, indicating overall index maturity.


Q: Can I compare indices?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-index and cross-sector comparison
Email Domain CheckAudit your own domain