DNS posture
Coverage, configuration quality, enforcement, and domain roster across the portfolio
Percentage of domains with a published record for each protocol (DMARC, SPF, DKIM, TLS-RPT, MTA-STS, BIMI, ARC). Includes monitor/warn statuses (e.g. DMARC p=none). Measures coverage, not configuration strength — see DNS quality.
Domain-equal average of configuration quality scores (0–100) from latest health scoring — policy strength, rua/pct, SPF hardfail and lookup budget, DKIM key strength, and enhancements.
Coverage percentage for each protocol, split for domains actively sending email versus parked.
Published p= policy by domain count and message volume under those domains.
Health scores split for sending vs parked domains.
DKIM/SPF alignment mode and sampling percentage from aggregate report policy sections.
Selectors learned from RUA/RUF and DNS probes.
Field-level DNS changes detected by record monitoring.
Domain-equal quality average; volume-weighted when RUA exists in range.
Published p= policy on monitored domains.
Lifecycle status of domains in this tenant.
Health = DNS quality score. Auth = aligned SPF or DKIM pass. Delivered = receiver disposition none. DNS columns = published-record status.
| Domain | Policy | Health | DNS | Volume | Auth | Delivered | Listed | Last report | |
|---|---|---|---|---|---|---|---|---|---|