Skip to main content

🇨🇳 SSE 50 Email Security

Weekly audit of email security across 50 companies in the SSE 50.

Shanghai Stock Exchange · 50 companies analysed · Scan week: 2026-03-23

  • Companies listed in the SSE 50 score an average of 29/100 for email security this week.
  • 0% of SSE 50 companies achieve a grade of A+ or A in email authentication, while 92% receive a D or F.
  • The average score of 29 is 13 points below the global average of 42, suggesting room for improvement in email authentication.
  • 36% of SSE 50 companies have deployed DMARC email authentication, and 6% enforce a strict reject policy to block spoofed emails.
  • SPF record deployment stands at 82%, authorizing legitimate sending servers and helping prevent email spoofing.
  • 0% of companies have configured BIMI to display their verified brand logo in supported email clients.
  • 0% enforce TLS encryption for inbound email delivery via MTA-STS, protecting against downgrade attacks.
  • DNSSEC is enabled on 2% of SSE 50 domains, adding cryptographic validation to DNS queries.
  • Jiangsu Hengrui Pharmaceuticals leads the SSE 50 with a top score of 56/100 (C).
  • Beijing-Shanghai High Speed Railway has the lowest score at 0/100, indicating significant gaps in email security configuration.
  • Scores range from 0 to 56 with a median of 29, reflecting varied levels of email security maturity across the index.

Average score

29/ 100

DMARC reject

6%

BIMI configured

0%

MTA-STS enforce

0%

DNSSEC enabled

2%

0
A+
0
A
0
B
4
C
16
D
30
F

29

Average

29

Median

0

Min

56

Max

Company

Grade
1Jiangsu Hengrui Pharmaceuticalshengrui.com56C
2Agricultural Bank of Chinaabchina.com53C
3LONGi Green Energylongi.com51C
4Foxconn Industrial Internetfii-foxconn.com50C
5Sinopecsinopec.com49D
6Wanhua Chemicalwhchem.com48D
7Zijin Miningzijinmining.com48D
8China Merchants Bankcmbchina.com48D
9China Construction Bankccb.com48D
10COSCO Shippingcoscoshipping.com47D
11Nongfu Springnongfuspring.com46D
12WuXi AppTecwuxiapptec.com45D
13China Telecomchinatelecom-h.com43D
14ICBCicbc.com.cn40D
15China Yangtze Powercypc.com.cn38D
16CRRC Corporationcrrcgc.cc38+7D
17Inner Mongolia Yiliyili.com37D
18Shanghai Pudong Development Bankspdb.com.cn35D
19CMOC Groupcmoc.com33D
20East Money Informationeastmoney.com32D
21China Pacific Insurancecpic.com.cn29F
22China Unicom (China)chinaunicom.com.cn29F
23Ping An Insurance (China)pingan.com29F
24CNOOCcnooc.com.cn29F
25Haier Smart Homehaier.com29F
26China State Constructioncscec.com29F
27Kweichow Moutaimoutai.com.cn29F
28China Life Insurancechinalife.com.cn29F
29Poly Developmentspolycn.com29+14F
30SMICsmics.com26F
31PetroChinapetrochina.com.cn26F
32Wuliangyewuliangye.com.cn26F
33CITIC Securitiescitics.com26F
34Bank of Chinaboc.cn25F
35China State Shipbuildingcssc.net.cn23F
36Bank of Communicationsbankcomm.com23F
37Chongqing Sokonsokon.com23F
38Industrial Bankcib.com.cn23F
39Postal Savings Bank of Chinapsbc.com23F
40SANY Heavy Industrysany.com.cn20F
41Cambricon Technologiescambricon.com15F
42China Railway Groupcrec.cn14F
43Great Wall Motorgwm.com.cn14F
44Nari Technologynaritech.cn8F
45China Shenhua Energycsec.com8F
46China Tourism Group Duty Freectgdutyfree.com.cn0F
47Foshan Haitian Flavouringhaitian-food.com0F
48Will Semiconductorwillsemi.com0F
49China Northern Rare Earthreht.com0F
50Beijing-Shanghai High Speed Railwaycr-jh.cn0F

Understanding index-level analysis

A stock index groups the largest companies in a market. Analyzing their email security provides a representative snapshot of how a country's or region's corporate sector protects against email-based threats.

What this page shows:

  • Average score - The mean email security score across all constituent companies
  • Grade distribution - How many companies fall into each grade bracket (A+ through F)
  • Company table - Individual scores, grades and key indicator status for each company
  • Sector breakdown - How different industries within the index compare

Key standards tracked

Each company is evaluated on:

  1. SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
  2. DKIM - Are signing keys published and strong enough (2048-bit minimum)?
  3. DMARC - Is a policy in place? Is it set to quarantine or reject?
  4. BIMI - Is the brand logo published for inbox display?
  5. MTA-STS - Is inbound email transport encryption enforced?
  6. DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies scored?

A: Each domain is analyzed for email authentication standards and awarded up to 100 points across three pillars.


Q: What does the grade distribution show?

A: The spread of scores from A+ to F, indicating overall index maturity.


Q: Can I compare indices?

A: Yes, via the Statistics page.


PagePurpose
Observatory DashboardOverall overview with key metrics
StatisticsCross-index and cross-sector comparison
Email Domain CheckAudit your own domain