Security status of our domains
We ask companies to trust our emails. So we show openly how well our own domains are protected – checked automatically, updated every six hours.
Fraudsters like to send emails in the name of well-known companies. Three DNS records (SPF, DKIM and DMARC) let every mail server check whether an email really comes from us – and reject forgeries. For our websites we check encryption and the usual security settings.
What we check
- Email: SPF, DKIM and DMARC – protection against forged sender addresses.
- Website: valid certificate, forced HTTPS (HSTS), security headers and a security.txt for reporting vulnerabilities.
- Optional extras: DNSSEC, MTA-STS and TLS-RPT (encrypted mail delivery).
Only public data is read – the same data every mail server and browser sees. The grade A–F counts the core checks; optional extras are shown but not counted.
Live status
Loading the current status …
Found something we should fix? Please let us know at [email protected] – see also our security.txt.