We track the state of email authentication across the internet and openly share data, insights and guidance that help companies and domain owners defend against impersonation.
We scanned the DMARC, SPF, MTA-STS, TLS-RPT and BIMI records of the Forbes Global 2000 top 100. 64 are at reject, 15 have no DMARC record at all, and geography predicts enforcement better than size.