How are companies within an index scored?

Each company's primary domain is analyzed for SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC. Points are awarded for each standard based on its quality and strictness, totaling up to 100.

What does the grade distribution tell me?

The grade distribution shows the spread of scores across all companies in the index. If most companies score A or A+, the index has strong overall email security. A wide spread from A+ to F indicates significant variation.

Why might a well-known company score poorly?

Email security configuration is often managed independently from other cybersecurity controls. A company may have strong network security but still lack proper DMARC enforcement or MTA-STS deployment.

How often are scores updated?

All domains are rescanned weekly. Changes in DNS records are reflected in the next weekly scan.

🇭🇰 Hang Seng Email Security

Weekly audit of email security across 89 companies in the Hang Seng.

Hong Kong Stock Exchange · 89 companies analysed · Scan week: 2026-03-02

Average score

33/ 100

DMARC reject

14.6%

BIMI configured

MTA-STS enforce

DNSSEC enabled

3.4%

A+

Average

Median

Min

Max

Company

		Country		Grade	DMARC	SPF	BIMI	MTA-STS	DNSSEC
1	CLP Holdingsclpgroup.com	🇭🇰 Hong Kong	61	C	reject	-all	✗	✗	✓
2	Power Assets Holdingspowerassets.com	🇭🇰 Hong Kong	59	C	quarantine	-all	✗	✗	✓
3	CK Infrastructurecki.com.hk	🇭🇰 Hong Kong	56	C	quarantine	-all	✗	✗	✗
4	CK Asset Holdingsckah.com	🇭🇰 Hong Kong	56	C	quarantine	-all	✗	✗	✗
5	Baidubaidu.com	🇨🇳 China	56	C	quarantine	-all	✗	✗	✗
6	Trip.com Grouptrip.com	🇨🇳 China	54	C	reject	-all	✗	✗	✗
7	BYD Companybyd.com	🇨🇳 China	54	C	quarantine	-all	✗	✗	✗
8	HSBChsbc.com	🇬🇧 United Kingdom	54	C	reject	~all	✗	✗	✗
9	ZhongAn Onlinezhongan.com	🇨🇳 China	54	C	quarantine	-all	✗	✗	✗
10	MTR Corporationmtr.com.hk	🇭🇰 Hong Kong	53	C	quarantine	~all	✗	✗	✗
11	Innovent Biologicsinnoventbio.com	🇨🇳 China	53	C	reject	~all	✗	✗	✗
12	Henderson Landhld.com	🇭🇰 Hong Kong	52	C	none	-all	✗	✗	✗
13	Hong Kong Exchanges and Clearinghkexgroup.com	🇭🇰 Hong Kong	51	C	reject	-all	✗	✗	✗
14	Link REITlinkreit.com	🇭🇰 Hong Kong	51	C	quarantine	~all	✗	✗	✗
15	BOC Hong Kongbochk.com	🇭🇰 Hong Kong	51	C	quarantine	~all	✗	✗	✗
16	Prudentialprudentialplc.com	🇬🇧 United Kingdom	50	C	reject	-all	✗	✗	✗
17	CK Hutchisonckh.com.hk	🇭🇰 Hong Kong	50	C	quarantine	-all	✗	✗	✗
18	Bilibilibilibili.com	🇨🇳 China	49	D	reject	-all	✗	✗	✗
19	Lenovo Grouplenovo.com	🇨🇳 China	49	D	reject	~all	✗	✗	✗
20	Chow Tai Fookchowtaifook.com	🇭🇰 Hong Kong	48	D	quarantine	-all	✗	✗	✗
21	JD.comjd.com	🇨🇳 China	48	D	none	-all	✗	✗	✗
22	Sinopecsinopec.com	🇨🇳 China	47	D	reject	-all	✗	✗	✗
23	China Construction Bankccb.com	🇨🇳 China	46	D	none	-all	✗	✗	✗
24	Hengan Internationalhengan.com	🇨🇳 China	46	D	reject	-all	✗	✗	✗
25	China Merchants Bankcmbchina.com	🇨🇳 China	46	D	none	-all	✗	✗	✗
26	Kuaishoukuaishou.com	🇨🇳 China	46	D	none	-all	✗	✗	✗
27	Nongfu Springnongfuspring.com	🇨🇳 China	45	D	none	-all	✗	✗	✗
28	Hang Seng Bankhangseng.com	🇭🇰 Hong Kong	44	D	reject	~all	✗	✗	✗
29	SenseTimesensetime.com	🇨🇳 China	44	D	quarantine	-all	✗	✗	✗
30	Budweiser APACbudweiserapac.com	🇭🇰 Hong Kong	44	D	quarantine	-all	✗	✗	✗
31	Li Autolixiang.com	🇨🇳 China	44	D	quarantine	-all	✗	✗	✗
32	Sunny Opticalsunnyoptical.com	🇨🇳 China	44	D	reject	-all	✗	✗	✗
33	China Telecomchinatelecom-h.com	🇨🇳 China	43	D	quarantine	-all	✗	✗	✗
34	ANTA Sportsanta.com	🇨🇳 China	43	D	none	-all	✗	✗	✗
35	Tencent Holdingstencent.com	🇨🇳 China	43	D	quarantine	-all	✗	✗	✗
36	New World Developmentnwd.com.hk	🇭🇰 Hong Kong	42	D	none	-all	✗	✗	✗
37	XPengheyxpeng.com	🇨🇳 China	42	D	none	-all	✗	✗	✗
38	Galaxy Entertainmentgalaxyentertainment.com	🇭🇰 Hong Kong	41	D	quarantine	-all	✗	✗	✗
39	Alibaba Groupalibabagroup.com	🇨🇳 China	40	D	none	-all	✗	✗	✗
40	China Unicomchinaunicom.com.hk	🇨🇳 China	40	D	none	-all	✗	✗	✗
41	Zhongsheng Groupzhongshenggroup.com	🇨🇳 China	40	D	none	-all	✗	✗	✗
42	AIA Groupaia.com	🇭🇰 Hong Kong	39	D	none	~all	✗	✗	✗
43	ICBCicbc.com.cn	🇨🇳 China	39	D	—	-all	✗	✗	✗
44	PDD Holdings Inc.pddholdings.com	🇮🇪 Ireland	38	D	reject	-all	✗	✗	✗
45	AAC Technologiesaactechnologies.com	🇨🇳 China	38	D	quarantine	—	✗	✗	✗
46	Wuxi Biologicswuxibiologics.com	🇨🇳 China	37	D	quarantine	-all	✗	✗	✗
47	CITICcitic.com	🇨🇳 China	37	D	quarantine	-all	✗	✗	✗
48	Meituanmeituan.com	🇨🇳 China	36	D	quarantine	-all	✗	✗	✗
49	Techtronic Industriesttigroup.com	🇭🇰 Hong Kong	35	D	quarantine	~all	✗	✗	✗
50	Haier Smart Homehaier.net	🇨🇳 China	29	F	—	-all	✗	✗	✗
51	CNOOCcnooc.com.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
52	China Pacific Insurancecpic.com.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
53	Geely Automobilegeelyauto.com.hk	🇨🇳 China	29	F	—	-all	✗	✗	✗
54	China Life Insurancechinalife.com.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
55	Ping An Insurancepingan.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
56	China Resources Landcrland.com.hk	🇨🇳 China	29	F	—	-all	✗	✗	✗
57	Kingboard Holdingskingboard.com	🇭🇰 Hong Kong	29	F	—	-all	✗	✗	✗
58	NetEasenetease.com	🇨🇳 China	29	F	—	-all	✗	✗	✗
59	New Oriental Educationneworiental.org	🇨🇳 China	29	F	—	-all	✗	✗	✗
60	SMICsmics.com	🇨🇳 China	26	F	—	~all	✗	✗	✗
61	PetroChinapetrochina.com.cn	🇨🇳 China	26	F	—	~all	✗	✗	✗
62	Wharf REICwharfreic.com	🇭🇰 Hong Kong	26	F	—	~all	✗	✗	✗
63	Sun Hung Kai Propertiesshkp.com	🇭🇰 Hong Kong	26	F	—	~all	✗	✗	✗
64	Xinyi Solarxinyisolar.com	🇨🇳 China	25	F	quarantine	~all	✗	✗	✗
65	Bank of Chinaboc.cn	🇨🇳 China	25	F	quarantine	-all	✗	✗	✗
66	Haidilaohaidilao.com	🇨🇳 China	23	F	—	-all	✗	✗	✗
67	WH Groupwh-group.com	🇨🇳 China	23	F	—	-all	✗	✗	✗
68	Bank of Communicationsbankcomm.com	🇨🇳 China	23	F	—	-all	✗	✗	✗
69	Li Ninglining.com	🇨🇳 China	23	F	—	-all	✗	✗	✗
70	Hang Lung Propertieshanglung.com	🇭🇰 Hong Kong	21	F	—	~all	✗	✗	✗
71	ENN Energyennenergy.com	🇨🇳 China	15	F	—	-all	✗	✗	✗
72	Longfor Grouplongfor.com	🇨🇳 China	15	F	—	-all	✗	✗	✗
73	Xiaomimi.com	🇨🇳 China	15	F	—	-all	✗	✗	✗
74	Sands Chinasandschina.com	🇭🇰 Hong Kong	15	F	—	—	✗	✗	✓
75	China Hongqiao Grouphongqiaochina.com	🇨🇳 China	14	F	—	—	✗	✗	✗
76	Sino Biopharmaceuticalsinobiopharm.com	🇨🇳 China	14	F	—	—	✗	✗	✗
77	China Merchants Portcmport.com.hk	🇨🇳 China	14	F	—	—	✗	✗	✗
78	Orient Overseas Container Lineooilgroup.com	🇭🇰 Hong Kong	8	F	—	—	✗	✗	✗
79	China Shenhua Energycsec.com	🇨🇳 China	8	F	—	—	✗	✗	✗
80	Hansoh Pharmaceuticalhansoh.com	🇨🇳 China	8	F	—	—	✗	✗	✗
81	China Resources Beercrbeer.com.hk	🇨🇳 China	0	F	—	—	✗	✗	✗
82	BYD Electronicbydelectronic.com	🇨🇳 China	0	F	—	—	✗	✗	✗
83	Alibaba Healthalihealth.cn	🇨🇳 China	0	F	—	—	✗	✗	✗
84	JD Healthjdhealth.com	🇨🇳 China	0	F	—	—	✗	✗	✗
85	CGN Powercgnp.com.cn	🇨🇳 China	0	F	—	—	✗	✗	✗
86	China Mengniu Dairymengniu.com.cn	🇨🇳 China	0	F	—	—	✗	✗	✗
87	China Overseas Land & Investmentcoli.com.hk	🇨🇳 China	0	F	—	—	✗	✗	✗
88	China Mobilechinamobileltd.com	🇨🇳 China	0	F	—	—	✗	✗	✗
89	China Resources Powercr-power.com	🇨🇳 China	0	F	—	—	✗	✗	✗

Understanding index-level analysis

A stock index groups the largest companies in a market. Analyzing their email security provides a representative snapshot of how a country's or region's corporate sector protects against email-based threats.

What this page shows:

Average score - The mean email security score across all constituent companies
Grade distribution - How many companies fall into each grade bracket (A+ through F)
Company table - Individual scores, grades and key indicator status for each company
Sector breakdown - How different industries within the index compare

Key standards tracked

Each company is evaluated on:

SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
DKIM - Are signing keys published and strong enough (2048-bit minimum)?
DMARC - Is a policy in place? Is it set to quarantine or reject?
BIMI - Is the brand logo published for inbox display?
MTA-STS - Is inbound email transport encryption enforced?
DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies scored?

A: Each domain is analyzed for email authentication standards and awarded up to 100 points across three pillars.

Q: What does the grade distribution show?

A: The spread of scores from A+ to F, indicating overall index maturity.

Q: Can I compare indices?

A: Yes, via the Statistics page.

Page	Purpose
Observatory Dashboard	Overall overview with key metrics
Statistics	Cross-index and cross-sector comparison
Email Domain Check	Audit your own domain

🇭🇰 Hang Seng Email Security

Company

Understanding index-level analysis

Key standards tracked

FAQ - Frequently asked questions

Related pages