How are companies within an index scored?

Each company's primary domain is analyzed for SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC. Points are awarded for each standard based on its quality and strictness, totaling up to 100.

What does the grade distribution tell me?

The grade distribution shows the spread of scores across all companies in the index. If most companies score A or A+, the index has strong overall email security. A wide spread from A+ to F indicates significant variation.

Why might a well-known company score poorly?

Email security configuration is often managed independently from other cybersecurity controls. A company may have strong network security but still lack proper DMARC enforcement or MTA-STS deployment.

How often are scores updated?

All domains are rescanned weekly. Changes in DNS records are reflected in the next weekly scan.

🇧🇷 Ibovespa Email Security

Weekly audit of email security across 76 companies in the Ibovespa.

B3 (Brasil, Bolsa, Balcão) · 76 companies analysed · Scan week: 2026-03-23

Companies listed in the Ibovespa score an average of 45/100 for email security this week.
0% of Ibovespa companies achieve a grade of A+ or A in email authentication, while 59% receive a D or F.
The average score of 45 is 3 points above the global average of 42, indicating stronger-than-average email security practices.
88.2% of Ibovespa companies have deployed DMARC email authentication, and 36.8% enforce a strict reject policy to block spoofed emails.
SPF record deployment stands at 97%, authorizing legitimate sending servers and helping prevent email spoofing.
1% of companies have configured BIMI to display their verified brand logo in supported email clients.
0% enforce TLS encryption for inbound email delivery via MTA-STS, protecting against downgrade attacks.
DNSSEC is enabled on 22.4% of Ibovespa domains, adding cryptographic validation to DNS queries.
ENGIE Brasil leads the Ibovespa with a top score of 71/100 (B).
Hypera Pharma has the lowest score at 0/100, indicating significant gaps in email security configuration.
Scores range from 0 to 71 with a median of 45, reflecting varied levels of email security maturity across the index.

Average score

45/ 100

DMARC reject

36.8%

BIMI configured

MTA-STS enforce

DNSSEC enabled

22.4%

A+

Average

Median

Min

Max

Company

		Country		Grade	DMARC	SPF	BIMI	MTA-STS	DANE-TLSA	DNSSEC
1	ENGIE Brasilengie.com.br	🇧🇷 Brazil	71	B	reject	-all	✗	✗	✗	✓
2	Fleuryfleury.com.br	🇧🇷 Brazil	70	B	reject	-all	✗	✗	✗	✓
3	Embraerembraer.com	🇧🇷 Brazil	70	B	reject	~all	✗	✗	✗	✓
4	SLC Agrícolaslcagricola.com.br	🇧🇷 Brazil	70	B	quarantine	-all	✗	✗	✗	✓
5	EcoRodoviasecorodovias.com.br	🇧🇷 Brazil	67	C	reject	-all	✗	✗	✗	✓
6	B3b3.com.br	🇧🇷 Brazil	67	C	reject	-all	✗	✗	✗	✓
7	Banco do Brasilbb.com.br	🇧🇷 Brazil	65+1	C	reject	-all	✗	✗	✗	✓
8	Petrobraspetrobras.com.br	🇧🇷 Brazil	63	C	quarantine	-all	✗	✗	✗	✓
9	JBSjbs.com.br	🇧🇷 Brazil	62	C	none	-all	✗	✗	✗	✓
10	RaiaDrogasilraiadrogasil.com.br	🇧🇷 Brazil	62	C	quarantine	—	✗	✗	✗	✓
11	EDP - Energias do Brasiledp.com.br	🇧🇷 Brazil	61-2	C	quarantine	~all	✗	✗	✗	✓
12	3R Petroleum3rpetroleum.com.br	🇧🇷 Brazil	60	C	quarantine	-all	✗	✗	✗	✓
13	Santander Brasilsantander.com.br	🇧🇷 Brazil	58	C	reject	-all	✗	✗	✗	✗
14	Minerva Foodsminervafoods.com	🇧🇷 Brazil	57+2	C	quarantine	-all	✗	✗	✗	✗
15	Equatorial Energiaequatorialenergia.com.br	🇧🇷 Brazil	56	C	quarantine	-all	✗	✗	✗	✗
16	Cognacogna.com.br	🇧🇷 Brazil	55+11	C	reject	~all	✗	✗	✗	✗
17	Klabinklabin.com.br	🇧🇷 Brazil	55	C	reject	~all	✗	✗	✗	✗
18	BRFbrf-global.com	🇧🇷 Brazil	55	C	quarantine	-all	✗	✗	✗	✗
19	Cosancosan.com.br	🇧🇷 Brazil	54	C	reject	-all	✗	✗	✗	✓
20	Banco Interinter.co	🇧🇷 Brazil	54	C	reject	-all	✗	✗	✗	✗
21	BB Seguridadebbseguridade.com.br	🇧🇷 Brazil	53	C	reject	-all	✗	✗	✗	✓
22	Energisaenergisa.com.br	🇧🇷 Brazil	52	C	reject	-all	✗	✗	✗	✗
23	Gol Linhas Aéreasvoegol.com.br	🇧🇷 Brazil	52	C	quarantine	~all	✗	✗	✗	✗
24	Itaúsaitausa.com.br	🇧🇷 Brazil	52	C	reject	-all	✗	✗	✗	✗
25	Localizalocaliza.com	🇧🇷 Brazil	52	C	reject	-all	✗	✗	✗	✗
26	CSNcsn.com.br	🇧🇷 Brazil	51	C	quarantine	-all	✗	✗	✗	✗
27	CEMIGcemig.com.br	🇧🇷 Brazil	51+2	C	quarantine	-all	✗	✗	✗	✗
28	Magazine Luizamagazineluiza.com.br	🇧🇷 Brazil	51	C	none	-all	✗	✗	✗	✗
29	WEGweg.net	🇧🇷 Brazil	51	C	none	-all	✗	✗	✗	✗
30	CPFL Energiacpfl.com.br	🇧🇷 Brazil	51-13	C	quarantine	-all	✗	✗	✗	✓
31	Banco Panbancopan.com.br	🇧🇷 Brazil	50	C	reject	~all	✗	✗	✗	✗
32	Taesataesa.com.br	🇧🇷 Brazil	49	D	quarantine	-all	✗	✗	✗	✗
33	Alpargatasalpargatas.com.br	🇧🇷 Brazil	49	D	reject	~all	✗	✗	✗	✗
34	Natura &Conaturaeco.com	🇧🇷 Brazil	49	D	reject	~all	✗	✗	✗	✗
35	BTG Pactualbtgpactual.com	🇧🇷 Brazil	47	D	reject	~all	✓	✗	✗	✗
36	Hapvidahapvida.com.br	🇧🇷 Brazil	46	D	none	-all	✗	✗	✗	✗
37	Locaweblocaweb.com.br	🇧🇷 Brazil	46	D	quarantine	-all	✗	✗	✗	✗
38	Assaíassai.com.br	🇧🇷 Brazil	46	D	quarantine	-all	✗	✗	✗	✗
39	Multiplanmultiplan.com.br	🇧🇷 Brazil	45	D	none	-all	✗	✗	✗	✗
40	Vibra Energiavibra.com.br	🇧🇷 Brazil	44	D	none	~all	✗	✗	✗	✗
41	Itaú Unibancoitau.com.br	🇧🇷 Brazil	44	D	reject	-all	✗	✗	✗	✗
42	Copelcopel.com	🇧🇷 Brazil	43	D	none	-all	✗	✗	✗	✗
43	MRV Engenhariamrv.com.br	🇧🇷 Brazil	43	D	reject	-all	✗	✗	✗	✗
44	Lojas Rennerrenner.com.br	🇧🇷 Brazil	43	D	quarantine	~all	✗	✗	✗	✗
45	Bradesparbradespar.com.br	🇧🇷 Brazil	41	D	reject	-all	✗	✗	✗	✗
46	Ambevambev.com.br	🇧🇷 Brazil	41	D	quarantine	~all	✗	✗	✗	✗
47	Bradescobradesco.com.br	🇧🇷 Brazil	41	D	reject	-all	✗	✗	✗	✗
48	TOTVStotvs.com.br	🇧🇷 Brazil	41	D	quarantine	-all	✗	✗	✗	✗
49	Telefónica Brasiltelefonica.com.br	🇧🇷 Brazil	41	D	reject	-all	✗	✗	✗	✗
50	Sabespsabesp.com.br	🇧🇷 Brazil	40+2	D	reject	-all	✗	✗	✗	✗
51	Cielocielo.com.br	🇧🇷 Brazil	40	D	quarantine	-all	✗	✗	✗	✗
52	Ezteceztec.com.br	🇧🇷 Brazil	39	D	reject	-all	✗	✗	✗	✗
53	Valevale.com	🇧🇷 Brazil	38	D	reject	-all	✗	✗	✗	✗
54	Eletrobraseletrobras.com	🇧🇷 Brazil	38	D	quarantine	~all	✗	✗	✗	✗
55	Gerdaugerdau.com	🇧🇷 Brazil	37	D	none	—	✗	✗	✗	✗
56	Metalúrgica Gerdaugerdau.com	🇧🇷 Brazil	37	D	none	—	✗	✗	✗	✗
57	Dexcodexco.com.br	🇧🇷 Brazil	37	D	none	-all	✗	✗	✗	✗
58	Grupo Somagruposoma.com.br	🇧🇷 Brazil	36	D	—	?all	✗	✗	✗	✗
59	Iguatemiiguatemi.com.br	🇧🇷 Brazil	36	D	quarantine	-all	✗	✗	✗	✗
60	Rede D'Orrededorsaoluiz.com.br	🇧🇷 Brazil	36	D	none	-all	✗	✗	✗	✓
61	Suzanosuzano.com.br	🇧🇷 Brazil	36	D	quarantine	-all	✗	✗	✗	✗
62	Enevaeneva.com.br	🇧🇷 Brazil	35	D	quarantine	-all	✗	✗	✗	✗
63	Braskembraskem.com	🇧🇷 Brazil	34	D	none	-all	✗	✗	✗	✗
64	Carrefour Brasilcarrefour.com.br	🇧🇷 Brazil	33	D	quarantine	~all	✗	✗	✗	✗
65	Marfrigmarfrig.com.br	🇧🇷 Brazil	32	D	none	-all	✗	✗	✗	✗
66	Yduqsyduqs.com.br	🇧🇷 Brazil	31	D	none	-all	✗	✗	✗	✗
67	CCRccr.com.br	🇧🇷 Brazil	30	D	reject	-all	✗	✗	✗	✗
68	Usiminasusiminas.com.br	🇧🇷 Brazil	29	F	—	-all	✗	✗	✗	✗
69	Ultraparultrapar.com.br	🇧🇷 Brazil	29	F	—	-all	✗	✗	✗	✗
70	IRB Brasil REirbbrasil.com.br	🇧🇷 Brazil	29	F	—	-all	✗	✗	✗	✗
71	Azul Airlinesazul.com.br	🇧🇷 Brazil	26	F	—	-all	✗	✗	✓	✗
72	Rumorumo.com.br	🇧🇷 Brazil	26	F	—	~all	✗	✗	✗	✗
73	Prioprio.com.br	🇧🇷 Brazil	23	F	—	—	✗	✗	✗	✓
74	Cyrela Brazil Realtycyrela.com.br	🇧🇷 Brazil	23-9	F	none	-all	✗	✗	✗	✗
75	TIM Brasiltim.com.br	🇧🇷 Brazil	23	F	—	~all	✗	✗	✗	✗
76	Hypera Pharmahyperafarmaceutica.com.br	🇧🇷 Brazil	0	F	—	—	✗	✗	✗	✗

Understanding index-level analysis

A stock index groups the largest companies in a market. Analyzing their email security provides a representative snapshot of how a country's or region's corporate sector protects against email-based threats.

What this page shows:

Average score - The mean email security score across all constituent companies
Grade distribution - How many companies fall into each grade bracket (A+ through F)
Company table - Individual scores, grades and key indicator status for each company
Sector breakdown - How different industries within the index compare

Key standards tracked

Each company is evaluated on:

SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
DKIM - Are signing keys published and strong enough (2048-bit minimum)?
DMARC - Is a policy in place? Is it set to quarantine or reject?
BIMI - Is the brand logo published for inbox display?
MTA-STS - Is inbound email transport encryption enforced?
DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies scored?

A: Each domain is analyzed for email authentication standards and awarded up to 100 points across three pillars.

Q: What does the grade distribution show?

A: The spread of scores from A+ to F, indicating overall index maturity.

Q: Can I compare indices?

A: Yes, via the Statistics page.

Page	Purpose
Observatory Dashboard	Overall overview with key metrics
Statistics	Cross-index and cross-sector comparison
Email Domain Check	Audit your own domain

🇧🇷 Ibovespa Email Security

Company

Understanding index-level analysis

Key standards tracked

FAQ - Frequently asked questions

Related pages