Overview
Authentication health and email volume for your organisation
Share of domains with a published record present (coverage, not quality/enforcement)
Percentage of domains with a published record for each protocol (DMARC, SPF, DKIM, TLS-RPT, MTA-STS, BIMI, ARC). Includes monitor/warn statuses (e.g. DMARC p=none). Measures coverage, not configuration strength — see DNS quality.
Domain-equal average of configuration quality scores (0–100) from latest health scoring — policy strength, rua/pct, SPF hardfail and lookup budget, DKIM key strength, and enhancements.
Coverage percentage for each protocol, split for domains actively sending email versus parked.
Published p= policy by domain count and message volume under those domains.
Health scores split for sending vs parked domains.
DKIM/SPF alignment mode and sampling percentage from aggregate report policy sections.
Selectors learned from RUA/RUF and DNS probes.
Auth outcome × blocklist-listed source IPs (not soft risk score).
Field-level DNS changes detected by record monitoring.
From TLS-RPT failure-details in this window.
Auth-failure types from forensic reports.
ARC result on aggregate report rows when present (mail path, not DNS readiness).
Total volume of emails reported over time.
Delivered, quarantined, and rejected volume over the window.
DMARC auth (aligned SPF or DKIM pass) vs receiver disposition rates (quarantine / reject) over time.
Highest-volume source IPs in this window.
RUA, forensic (RUF), and TLS-RPT report counts.
Domain-equal quality average; volume-weighted when RUA exists in range.
Open critical / high / warning findings across the organisation (by title).
Open DNS/configuration findings by severity.
Authorised, suspicious, and unknown senders across the portfolio.
Published p= policy on monitored domains.
Lifecycle status of domains in this tenant.
Receiver action: delivered, quarantined, or rejected (not authentication).
Aligned SPF results from aggregate reports.
Aligned DKIM results from aggregate reports.
DMARC policy override reasons from aggregate reports (e.g. trusted forwarder, local policy).
Message volume attributed to classified senders (authorised / suspicious / unknown).
Geographic distribution of email sources by country.
Health = DNS quality score. Auth = aligned SPF or DKIM pass. Delivered = receiver disposition none. DNS columns = published-record status.
| Domain | Policy | Health | DNS | Volume | Auth | Delivered | Listed | Last report | |
|---|---|---|---|---|---|---|---|---|---|
| Loading… | |||||||||