Published reports
How the internet’s largest senders authenticate their mail.
The same scan anyone can run here, kept current for the platforms and providers other people’s mail depends on. Every record is public DNS, read with public resolvers.
| Domain | Grade | Score |
|---|---|---|
| adobe.com | A | 90 |
| amazon.com | B | 80 |
| apple.com | B | 81 |
| atlassian.com | A | 90 |
| cisco.com | A | 90 |
| cloudflare.com | B | 80 |
| digitalocean.com | A | 90 |
| docusign.com | A | 90 |
| dropbox.com | A | 90 |
| fastly.com | A | 90 |
| github.com | B | 80 |
| gitlab.com | A | 90 |
| google.com | A | 90 |
| hubspot.com | A | 90 |
| ibm.com | A | 90 |
| infosys.com | A | 94 |
| intel.com | D | 65 |
| intuit.com | A | 90 |
| linkedin.com | A | 90 |
| linode.com | A | 90 |
| mailchimp.com | A | 90 |
| mailgun.com | B | 80 |
| microsoft.com | A | 90 |
| mozilla.org | A | 90 |
| netflix.com | A | 90 |
| notion.so | B | 80 |
| nvidia.com | A | 90 |
| okta.com | A | 90 |
| oracle.com | A | 90 |
| postmarkapp.com | F | 30 |
| proton.me | D | 65 |
| salesforce.com | A | 90 |
| sap.com | A | 90 |
| sendgrid.com | A | 90 |
| shopify.com | A | 90 |
| slack.com | A | 90 |
| spotify.com | A | 90 |
| stripe.com | A | 90 |
| tcs.com | A | 90 |
| twilio.com | A | 90 |
| wipro.com | B | 80 |
| wordpress.com | B | 80 |
| zendesk.com | F | 49 |
| zoho.com | A | 90 |
| zoom.us | A | 90 |
45 reports current. A grade describes what the DNS says today, not whether any particular message will be delivered.
Why these domains
They are the platforms, providers and infrastructure other people’s mail runs through, so their configuration is worth reading rather than just grading. Nothing here comes from what visitors have scanned — a scan you run is yours and is never published.
Your own domain
The same scan, on any domain, in about twenty seconds. It reads every record together, follows each SPF include, and names the services authorised to send as you.
Scan your domain →