DMARC policy · UK companies

What share of UK companies have a DMARC policy that is absent or monitor-only (p=none)?

79.01%

79.01% of UK companies (95% CI 77.41–80.54%), measured across 2,597 companies on 2026-08-17.

p=reject: 12.4%p=quarantine: 8.59%p=none: 27.3%malformed: 0.04%no record: 51.68%
p=reject · 12.4%p=quarantine · 8.59%p=none · 27.3%malformed · 0.04%no record · 51.68%
Trend

Measured every Monday since 2026-08-01 — 6 observations to date. Last measured 2026-08-17.

How this is measured

Tier 0. TXT lookup at _dmarc.<domain>; parse the p= tag. Denominator: has_mx.

Passive measurement: a single DNS lookup, TLS handshake, or homepage GET per domain. Aggregate-only; no individual company is named. 95% Wilson confidence intervals. Population: national company registries (Companies House, Brreg, SIRENE), sampled by size band and resolved to email-active domains. Parked domains excluded. Snapshot: uk-companies-house-per600-seed20260728.

Licensed CC BY 4.0 — reuse with attribution to Quiet Failures. Download: JSON · CSV.

Check a specific domain against this control with the free Email authentication audit.

Why it matters

The flagship quiet failure. p=none is monitor mode — it publishes a record, generates reports, and instructs receivers to deliver forged mail anyway. It looks like DMARC in every compliance checklist and questionnaire while providing no protection. malformed is the same failure by accident.

Limits of this measurement

A domain may be mid-rollout in none deliberately; we measure the state, not intent.

The same check, other segments

Show the remaining 65 segments

Share or cite this figure

Reuse is free under CC BY 4.0 — attribution to Quiet Failures is all we ask.

Post on X

Embed this stat

Free to reuse under CC BY 4.0 — the card links back and updates as the data does.

<iframe src="https://quietfailures.com/embed/dmarc-policy/gb-companies" width="380" height="210" style="border:0;max-width:100%" loading="lazy" title="What share of UK companies have a DMARC policy that is absent or monitor-only (p=none)?"></iframe>