Live aggregate data from 3 domains people have run through our deliverability checker. It shows how often real sending domains actually get authentication and transport security right, updated continuously as more domains are checked.
We have only 3 audits in the sample so far, so treat the numbers below as directional at best until it grows. This page updates itself as more domains are checked, so it is worth coming back to. Want to add a data point? Run the checker.
Authentication is what decides whether mail can be trusted, and since 2024 SPF, DKIM, and DMARC are required, not optional, for bulk senders to Gmail and Yahoo. Here is how often the domains we see actually have them.
| Signal | Share of domains |
|---|---|
| Valid SPF record | 100% |
| DKIM detected (at common selectors) | 33% |
| No DMARC record at all | 0% |
| DMARC at p=none (monitor only) | 0% |
| DMARC at p=quarantine | 0% |
| DMARC at p=reject (full enforcement) | 100% |
The DMARC split is usually the most revealing line: publishing a record is now common, but a large share sit at p=none, which only watches and never actually blocks a spoofed message.
These are the hardening layers on top of authentication. None are required to reach the inbox, so their adoption shows how far domains go beyond the minimum.
| Signal | Share of domains |
|---|---|
| DNSSEC signed | 33% |
| MTA-STS (enforced TLS) | 33% |
| TLS-RPT reporting | 33% |
| BIMI (logo in inbox) | 33% |
Every audit produces an A to F deliverability grade, weighted heavily toward authentication. The spread across all domains checked:
| Grade | Share of domains |
|---|---|
| Grade A | 0% |
| Grade B | 67% |
| Grade C | 0% |
| Grade D | 33% |
| Grade F | 0% |
The average score across the sample is 74/100.
Every number here comes from a real domain someone ran through our deliverability checker, aggregated automatically. We never store the domain, an IP address, or anything identifying in this dataset, only the categorical result of each check, which is what makes it safe to publish.
The important caveat: this is a self-selected sample, not a random survey of the internet. People who run a deliverability checker skew toward those setting up a new sending domain or chasing down a spam problem, so the numbers describe this tool's visitors, not all senders. We would rather say that plainly than dress it up as a definitive study.