AI companies
Email security of 18 AI companies
The labs shipping frontier models, graded on the unglamorous email-security basics.
Across these 18 domains, 100% publish SPF, 100% publish DMARC and 88.9% enforce it (reject or quarantine), 11.1% sit on p=none, and 100% sign with DKIM. Scanned August 13, 2026.
Every domain in this cohort
| Domain | SPF | DMARC | DKIM | MTA-STS | TLS-RPT |
|---|---|---|---|---|---|
| anthropic.com | Softfail | Reject | Yes | No | No |
| character.ai | Softfail | Reject | Yes | No | No |
| cohere.com | Softfail | Quarantine | Yes | No | No |
| deepinfra.com | Softfail | Quarantine | Yes | No | No |
| elevenlabs.io | Hardfail | Quarantine | Yes | No | No |
| fireworks.ai | Softfail | Quarantine | Yes | No | No |
| groq.com | Softfail | Reject | Yes | No | No |
| midjourney.com | Softfail | Quarantine | Yes | No | No |
| mistral.ai | Softfail | Quarantine | Yes | No | No |
| modal.com | Hardfail | Reject | Yes | No | No |
| openai.com | Hardfail | Reject | Yes | No | No |
| perplexity.ai | Softfail | Reject | Yes | No | No |
| poe.com | Softfail | Quarantine | Yes | No | No |
| replicate.com | Softfail | Quarantine | Yes | No | No |
| runwayml.com | Hardfail | Quarantine | Yes | No | No |
| together.ai | Softfail | Quarantine | Yes | No | No |
| huggingface.co | Softfail | None (monitor) | Yes | No | No |
| stability.ai | Softfail | None (monitor) | Yes | No | No |
Where does your domain stand?
Run the same 15 checks on your own domain — free, no signup. If you need the result as evidence, the signed Domain Audit Report turns it into a dated artifact your auditor can verify.