Domain.Posture

Big Tech

Email security of 24 Big Tech domains

The platforms everyone else defers to on security — measured against the same email-authentication checklist.

Across these 24 domains, 91.7% publish SPF, 95.8% publish DMARC and 83.3% enforce it (reject or quarantine), 12.5% sit on p=none, and 50% sign with DKIM. Scanned August 13, 2026.

Every domain in this cohort

DomainSPFDMARCDKIMMTA-STSTLS-RPT
alphabet.comNoneQuarantineYesNoNo
amazon.comHardfailQuarantineNoNoNo
amd.comSoftfailQuarantineYesNoNo
apple.comSoftfailQuarantineYesNoNo
broadcom.comSoftfailRejectYesNoYes
cisco.comPresentRejectYesNoNo
dell.comSoftfailRejectNoNoNo
facebook.comPresentRejectNoYesYes
google.comSoftfailRejectNoYesYes
hp.comSoftfailRejectYesNoNo
ibm.comHardfailRejectNoNoNo
meta.comPresentRejectNoNoNo
microsoft.comHardfailRejectYesYesYes
netflix.comHardfailRejectYesNoNo
nvidia.comSoftfailRejectYesNoNo
oracle.comSoftfailRejectNoNoNo
qualcomm.comSoftfailRejectNoYesYes
salesforce.comSoftfailRejectYesNoNo
sap.comPresentRejectYesNoYes
tsmc.comHardfailRejectYesNoNo
adobe.comNoneMissingNoNoNo
intel.comHardfailNone (monitor)NoNoNo
samsung.comSoftfailNone (monitor)NoNoNo
sony.comHardfailNone (monitor)NoNoNo

Where does your domain stand?

Run the same 15 checks on your own domain — free, no signup. If you need the result as evidence, the signed Domain Audit Report turns it into a dated artifact your auditor can verify.