How are companies within an index scored?

Each company's primary domain is analyzed for SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC. Points are awarded for each standard based on its quality and strictness, totaling up to 100.

What does the grade distribution tell me?

The grade distribution shows the spread of scores across all companies in the index. If most companies score A or A+, the index has strong overall email security. A wide spread from A+ to F indicates significant variation.

Why might a well-known company score poorly?

Email security configuration is often managed independently from other cybersecurity controls. A company may have strong network security but still lack proper DMARC enforcement or MTA-STS deployment.

How often are scores updated?

All domains are rescanned weekly. Changes in DNS records are reflected in the next weekly scan.

CaptainDNS

DNS Lookup

Choose a DNS record type to search for.

Propagation & diagnostics

Compare resolvers worldwide and inspect returned answers.

Propagation testPublic resolvers, remaining TTLs, divergent responses.
Domain DNS auditParent/local NS, authority and response times.
DNSSEC CheckerValidate chain of trust, DS records and signing keys.
API & integrations
Keep history, monitor your zones and automate recurring checks.

Email authentication

Tools to verify and validate your email authentication setup.

Syntax validation

Record inspectors

Generators

Deliverability

Email deliverability audit

Audit MX, SPF, DKIM and DMARC to confirm a domain is ready to send.

Mail header analyzer

Decode participants, authentication results and routing from raw headers.

Email tester

Send a test email and get instant authentication and deliverability feedback.

IP Blacklist Checker

Check if your IP is on email blacklists

Domain Blacklist Checker

Check if your domain is on URI blacklists

SPF Flattener

Flatten SPF records to reduce DNS lookups below the 10-lookup limit.

DKIM Selector Finder

Auto-discover all DKIM selectors for a domain via DNS brute-force.

SMTP/MX Tester

Test SMTP connectivity of your MX servers: banner, STARTTLS, TLS certificate, open relay.

IP tools

Quickly inspect an IP address or your own connection.

Text

Transform and measure your content in seconds.

Text case converter

Convert any block of text to upper or lower case instantly.

Slug generator

Transform any sentence into an SEO-friendly slug in seconds.

Word & character counter

Measure the length of any text, with instant word and character counts.

Password generator

Generate strong random passwords and memorable passphrases instantly.

Developer

Encoding, hashing, regex and formatting for everyday dev work.

Base64 encoder / decoder

Encode or decode any content in Base64 without leaving the browser.

Hash Generator

Compute MD5, SHA-1, SHA-256 and SHA-512 hashes of any text.

URL encoder / decoder

Encode or decode text using percent-encoding (RFC 3986) right in your browser.

Regex Tester

Test a regular expression against text and visualize matches.

JSON / YAML Formatter

Format, validate and convert JSON and YAML in one click.

Web & Certificates

BIMI logos, VMC/CSR certificates and web page diagnostics.

BIMI logo lookup

Inspect a BIMI logo URL - format, metadata and live rendering - before rollout.

BIMI SVG converter

Convert any SVG to BIMI-compliant Tiny-PS format in seconds.

CSR parser

Inspect a CSR, extract subject details, fingerprints and requested SANs.

VMC inspector

Inspect a Verified Mark Certificate - issuer, validity and SAN coverage - before you publish BIMI.

Page size checker

Check if your page exceeds Google's 2 MB crawl limit.

Phishing URL Checker

Check if a URL is flagged as phishing or malware by 4 threat intelligence sources.

🇮🇳 Nifty 50 Email Security

Weekly audit of email security across 50 companies in the Nifty 50.

National Stock Exchange of India · 50 companies analysed · Scan week: 2026-03-02

Average score

42/ 100

DMARC reject

56%

BIMI configured

26%

MTA-STS enforce

DNSSEC enabled

34%

A+

Average

Median

Min

Max

Company

		Country		Grade	DMARC	SPF	BIMI	MTA-STS	DNSSEC
1	Tata Consultancy Servicestcs.com	🇮🇳 India	75	B	reject	-all	✗	✗	✓
2	Tech Mahindratechmahindra.com	🇮🇳 India	69	C	reject	-all	✗	✗	✓
3	HDFC Bankhdfcbank.com	🇮🇳 India	69	C	reject	-all	✓	✗	✓
4	SBI Life Insurancesbilife.co.in	🇮🇳 India	69	C	reject	~all	✗	✗	✓
5	Ciplacipla.com	🇮🇳 India	67	C	reject	~all	✓	✗	✓
6	NTPCntpc.co.in	🇮🇳 India	67	C	reject	-all	✗	✗	✓
7	Bajaj Finservbajajfinserv.in	🇮🇳 India	67	C	reject	~all	✓	✗	✓
8	Wiprowipro.com	🇮🇳 India	66	C	quarantine	-all	✗	✗	✓
9	HCL Technologieshcltech.com	🇮🇳 India	66	C	reject	-all	✗	✗	✓
10	Tata Steeltatasteel.com	🇮🇳 India	64	C	quarantine	-all	✗	✗	✓
11	HDFC Life Insurancehdfclife.com	🇮🇳 India	62	C	reject	-all	✓	✗	✓
12	Maruti Suzukimarutisuzuki.com	🇮🇳 India	59	C	quarantine	?all	✗	✗	✓
13	Mahindra & Mahindramahindra.com	🇮🇳 India	59	C	quarantine	-all	✗	✗	✓
14	Larsen & Toubrolarsentoubro.com	🇮🇳 India	59	C	reject	-all	✓	✗	✗
15	Kotak Mahindra Bankkotak.com	🇮🇳 India	58	C	reject	-all	✗	✗	✓
16	State Bank of Indiasbi.co.in	🇮🇳 India	56	C	reject	-all	✓	✗	✗
17	Axis Bankaxisbank.com	🇮🇳 India	56	C	reject	-all	✓	✗	✓
18	ICICI Bankicicibank.com	🇮🇳 India	55	C	reject	-all	✓	✗	✗
19	Adani Portsadaniports.com	🇮🇳 India	53	C	reject	-all	✗	✗	✓
20	Adani Enterprisesadanienterprises.com	🇮🇳 India	53	C	reject	-all	✗	✗	✓
21	Infosysinfosys.com	🇮🇳 India	51	C	reject	-all	✗	✗	✗
22	Power Grid Corporationpowergrid.in	🇮🇳 India	51	C	quarantine	-all	✗	✗	✗
23	Eicher Motorseichermotors.com	🇮🇳 India	50	C	reject	~all	✗	✗	✗
24	Tata Motorstatamotors.com	🇮🇳 India	49	D	reject	~all	✗	✗	✗
25	BPCLbharatpetroleum.in	🇮🇳 India	49	D	reject	~all	✓	✗	✗
26	IndusInd Bankindusind.com	🇮🇳 India	48	D	reject	-all	✓	✗	✗
27	Reliance Industriesril.com	🇮🇳 India	44	D	reject	-all	✗	✗	✗
28	Bharti Airtelairtel.in	🇮🇳 India	44	D	quarantine	-all	✗	✗	✗
29	Coal Indiacoalindia.in	🇮🇳 India	44	D	quarantine	-all	✗	✗	✗
30	Asian Paintsasianpaints.com	🇮🇳 India	41	D	reject	-all	✓	✗	✗
31	Dr. Reddy's Laboratoriesdrreddys.com	🇮🇳 India	41	D	reject	-all	✓	✗	✗
32	ITCitcportal.com	🇮🇳 India	41	D	quarantine	~all	✗	✗	✗
33	Sun Pharmaceuticalsunpharma.com	🇮🇳 India	41	D	reject	-all	✓	✗	✗
34	Hero MotoCorpheromotocorp.com	🇮🇳 India	40	D	quarantine	~all	✗	✗	✗
35	Shriram Financeshriramfinance.in	🇮🇳 India	40	D	reject	~all	✗	✗	✗
36	Tata Consumer Productstataconsumer.com	🇮🇳 India	38	D	none	~all	✗	✗	✗
37	Nestle Indianestle.in	🇮🇳 India	37	D	reject	~all	✗	✗	✗
38	Apollo Hospitalsapollohospitals.com	🇮🇳 India	36	D	quarantine	-all	✗	✗	✗
39	Eternaleternal.com	🇮🇳 India	26	F	none	~all	✗	✗	✗
40	Bajaj Financebajajfinance.in	🇮🇳 India	23	F	—	-all	✗	✗	✗
41	Hindustan Unileverhul.co.in	🇮🇳 India	18	F	reject	-all	✗	✗	✗
42	Grasim Industriesgrasim.com	🇮🇳 India	14	F	—	—	✗	✗	✗
43	Hindalco Industrieshindalco.com	🇮🇳 India	10	F	—	—	✗	✗	✗
44	Bajaj Autobajajauto.com	🇮🇳 India	8	F	—	—	✗	✗	✗
45	Britannia Industriesbritannia.co.in	🇮🇳 India	8	F	—	—	✗	✗	✗
46	ONGCongcindia.com	🇮🇳 India	8	F	—	—	✗	✗	✗
47	Titan Companytitancompany.in	🇮🇳 India	0	F	—	—	✗	✗	✗
48	Trenttfrhl.com	🇮🇳 India	0	F	—	—	✗	✗	✗
49	JSW Steeljswsteel.in	🇮🇳 India	0	F	—	—	✗	✗	✗
50	Bharat Electronicsbel-india.in	🇮🇳 India	0	F	—	—	✗	✗	✗

Understanding index-level analysis

A stock index groups the largest companies in a market. Analyzing their email security provides a representative snapshot of how a country's or region's corporate sector protects against email-based threats.

What this page shows:

Average score - The mean email security score across all constituent companies
Grade distribution - How many companies fall into each grade bracket (A+ through F)
Company table - Individual scores, grades and key indicator status for each company
Sector breakdown - How different industries within the index compare

Key standards tracked

Each company is evaluated on:

SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
DKIM - Are signing keys published and strong enough (2048-bit minimum)?
DMARC - Is a policy in place? Is it set to quarantine or reject?
BIMI - Is the brand logo published for inbox display?
MTA-STS - Is inbound email transport encryption enforced?
DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies scored?

A: Each domain is analyzed for email authentication standards and awarded up to 100 points across three pillars.

Q: What does the grade distribution show?

A: The spread of scores from A+ to F, indicating overall index maturity.

Q: Can I compare indices?

A: Yes, via the Statistics page.

Page	Purpose
Observatory Dashboard	Overall overview with key metrics
Statistics	Cross-index and cross-sector comparison
Email Domain Check	Audit your own domain

🇮🇳 Nifty 50 Email Security

Company

Understanding index-level analysis

Key standards tracked

FAQ - Frequently asked questions

Related pages