Skip to main content

🇨🇭 SMI Email Security

Weekly audit of email security across 22 companies in the SMI.

SIX Swiss Exchange · 22 companies analysed · Scan week: 2026-03-23

  • Companies listed in the SMI score an average of 53/100 for email security this week.
  • 0% of SMI companies achieve a grade of A+ or A in email authentication, while 23% receive a D or F.
  • The average score of 53 is 11 points above the global average of 42, indicating stronger-than-average email security practices.
  • 100% of SMI companies have deployed DMARC email authentication, and 86.4% enforce a strict reject policy to block spoofed emails.
  • SPF record deployment stands at 95%, authorizing legitimate sending servers and helping prevent email spoofing.
  • 9% of companies have configured BIMI to display their verified brand logo in supported email clients.
  • 5% enforce TLS encryption for inbound email delivery via MTA-STS, protecting against downgrade attacks.
  • DNSSEC is enabled on 18.2% of SMI domains, adding cryptographic validation to DNS queries.
  • Kuehne+Nagel leads the SMI with a top score of 71/100 (B).
  • Lindt & Sprüngli has the lowest score at 38/100, indicating significant gaps in email security configuration.
  • Scores range from 38 to 71 with a median of 53, reflecting varied levels of email security maturity across the index.

Average score

53/ 100

DMARC reject

86.4%

BIMI configured

9%

MTA-STS enforce

5%

DNSSEC enabled

18.2%

0
A+
0
A
1
B
16
C
5
D
0
F

53

Average

53

Median

38

Min

71

Max

Company

Grade
1Kuehne+Nagelkuehne-nagel.com71B
2Partners Grouppartnersgroup.com68-15C
3Rocheroche.com60C
4Richemontrichemont.com58C
5Novartisnovartis.com58C
6Julius Bärjuliusbaer.com58C
7Lonzalonza.com55C
8Zurich Insurancezurich.com55C
9Geberitgeberit.com54C
10Holcimholcim.com54C
11Givaudangivaudan.com53C
12Sikasika.com53C
13Alconalcon.com52C
14Sandozsandoz.com52C
15TE Connectivityte.com52C
16UBSubs.com51C
17Sonovasonova.com51C
18Swisscomswisscom.com48D
19Nestlénestle.com48D
20Logitechlogitech.com44D
21ABBabb.com43D
22Lindt & Sprünglilindt.com38D

Understanding index-level analysis

A stock index groups the largest companies in a market. Analyzing their email security provides a representative snapshot of how a country's or region's corporate sector protects against email-based threats.

What this page shows:

  • Average score - The mean email security score across all constituent companies
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • Company table - Individual scores, grades and key indicator status for each company
  • Sector breakdown - How different industries within the index compare

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies scored?

A: Each domain is analyzed for email authentication standards and awarded up to 100 points across three pillars.


Q: What does the grade distribution show?

A: The spread of scores from A+ to F, indicating overall index maturity.


Q: Can I compare indices?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-index and cross-sector comparison
Email Domain CheckAudit your own domain
SMI - Email Security Scores