Skip to main content

๐Ÿ‡ฌ๐Ÿ‡ง FTSE 100 Email Security

Weekly audit of email security across 100 companies in the FTSE 100.

London Stock Exchange ยท 100 companies analysed ยท Scan week: 2026-03-02

Average score

47/ 100

DMARC reject

61%

BIMI configured

7%

MTA-STS enforce

3%

DNSSEC enabled

9%

0
A+
0
A
2
B
49
C
40
D
9
F

47

Average

51

Median

0

Min

72

Max

Company

Grade
1Shellshell.com72B
2CRHcrh.com70B
3Unileverunilever.com67C
4Croda Internationalcroda.com64C
5DS Smithdssmith.com64C
6Intertekintertek.com63C
7Diageodiageo.com63C
83i Group3i.com62C
9St. James's Placesjp.co.uk60C
10National Gridnationalgrid.com60C
11Avivaaviva.com60C
12Mondimondigroup.com59C
13Admiral Groupadmiralgroup.co.uk59C
14Ashtead Groupashtead-group.com58C
15Schrodersschroders.com58C
16SSEsse.com58C
17Ocadoocadogroup.com58C
18Haleonhaleon.com58C
19BT Groupbt.com58C
20Flutter Entertainmentflutter.com57C
21Land Securitieslandsec.com57C
22Severn Trentseverntrent.com57C
23Babcock Internationalbabcockinternational.com56C
24Marks & Spencermarksandspencer.com56C
25Standard Charteredsc.com55C
26Pearsonpearson.com55C
27Nextnextplc.co.uk55C
28WPPwpp.com55C
29Experianexperian.com55C
30Vodafonevodafone.com55C
31IMIimiplc.com55C
32HSBChsbc.com55C
33GSKgsk.com55C
34Barratt Developmentsbarrattdevelopments.co.uk55C
35Kingfisherkingfisher.com54C
36Hargreaves Lansdownhl.co.uk54C
37Hikma Pharmaceuticalshikma.com53C
38Phoenix Groupthephoenixgroup.com53C
39Smith & Nephewsmith-nephew.com53C
40BAE Systemsbaesystems.com53C
41Intermediate Capital Groupicgam.com52C
42International Consolidated Airlines Groupiairgroup.com52C
43M&Gmandg.com52C
44Prudentialprudentialplc.com52C
45RELXrelx.com52C
46Segrosegro.com52C
47Spirax Groupspiraxgroup.com52C
48Johnson Mattheymatthey.com51C
49Beazleybeazley.com51C
50Glencoreglencore.com51C
51Bunzlbunzl.com51C
52Centricacentrica.com49D
53Halmahalma.com49D
54Smurfit Westrocksmurfitwestrock.com49D
55easyJeteasyjet.com49D
56Reckitt Benckiserreckitt.com48D
57Sage Groupsage.com48D
58AstraZenecaastrazeneca.com48D
59Barclayshome.barclays48D
60Legal & Generallegalandgeneral.com47D
61Melrose Industriesmelroseplc.net47D
62NatWest Groupnatwestgroup.com47D
63Rightmoverightmove.co.uk46D
64Smiths Groupsmiths.com46D
65Coca-Cola HBCcoca-colahellenic.com45D
66British Landbritishland.com45D
67Fresnillofresnilloplc.com45D
68Whitbreadwhitbread.co.uk44D
69BPbp.com44D
70British American Tobaccobat.com44D
71Rentokil Initialrentokil-initial.com44D
72JD Sportsjdplc.com43D
73Persimmonpersimmonhomes.com43D
74Howden Joineryhowdenjoinerygroupplc.com42D
75Informainforma.com41D
76ConvaTecconvatecgroup.com41D
77London Stock Exchange Grouplseg.com41D
78Rolls-Roycerolls-royce.com41D
79Anglo Americanangloamerican.com41D
80Tescotescoplc.com40D
81Endeavour Miningendeavourmining.com40D
82DCCdcc.ie39D
83Rio Tintoriotinto.com39D
84Diplomadiplomaplc.com37D
85Entainentaingroup.com36D
86Compass Groupcompass-group.com36D
87Imperial Brandsimperialbrandsplc.com35D
88United Utilitiesunitedutilities.com34D
89Associated British Foodsabf.co.uk33D
90Berkeley Groupberkeleygroup.co.uk33D
91Taylor Wimpeytaylorwimpey.co.uk31D
92Antofagastaantofagasta.co.uk29F
93Weir Groupweir.co.uk23F
94Lloyds Banking Grouplloydsbankinggroup.com18F
95Auto Traderplc.autotrader.co.uk18F
96Sainsbury'scorporate.sainsburys.co.uk18F
97Hiscoxhiscoxgroup.com14F
98Games Workshopgames-workshop.com10F
99InterContinental Hotelsihgplc.com0F
100Burberryburberryplc.com0F

Understanding index-level analysis

A stock index groups the largest companies in a market. Analyzing their email security provides a representative snapshot of how a country's or region's corporate sector protects against email-based threats.

What this page shows:

  • Average score - The mean email security score across all constituent companies
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • Company table - Individual scores, grades and key indicator status for each company
  • Sector breakdown - How different industries within the index compare

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies scored?

A: Each domain is analyzed for email authentication standards and awarded up to 100 points across three pillars.


Q: What does the grade distribution show?

A: The spread of scores from A+ to F, indicating overall index maturity.


Q: Can I compare indices?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-index and cross-sector comparison
Email Domain CheckAudit your own domain