// CONTINUOUS 8-CORE UK PUBLIC TELEMETRY · UPDATED 2026-10-27T05:40:56Z

UK Sector Security & Email Posture Benchmarks. Scan Your Firm & Deploy the Fix.

Our 8-core UK diagnostic lab continuously audits public DNS-over-HTTPS (1.1.1.1) records, DMARC p=reject enforcement, SPF ≤10 lookup health, _mta-sts TLS policies, and web boundary headers across 43 public UK organisations in 6 sectors—plus rolling 24h UK Certificate Transparency (*.co.uk / *.org.uk) telemetry.

// LIVE UK 24H PUBLIC DNS, CT LOG & WORDPRESS TELEMETRY PULSE (32 RECENT UK DOMAINS AUDITED)
56.2% Lack p=rejectOf newly scanned UK .co.uk / .org.uk domains lack strict DMARC p=reject anti-spoofing
78.1% No MTA-STSLack _mta-sts SMTP TLS enforcement against downgrade attacks
59.4% SPF RiskPublish SoftFail (~all), missing SPF, or >8 DNS lookups (550-5.7.26 drop risk)
£12 – £39 GBPInstant self-serve drop-in remediation ZIP packs (or From US$15 24h Fiverr async delivery)
// INTERACTIVE SECTOR COMPARATOR · 100% CLIENT-SIDE CLOUDFLARE 1.1.1.1 DOH

Compare Your Domain Against Any UK Sector in 3 Seconds

Enter your organisation's domain below (or click any sector's Scan Your Firm Against This Sector → button) to run a live 6-control Cloudflare 1.1.1.1 DoH check and get your exact GBP Fix Pack + 24h Async Fiverr remediation match:

// 6 HIGH-INTENT UK SECTORS · CLICK ANY SECTOR TO BENCHMARK YOUR ORGANISATION

Live UK Sector Posture Scorecards (43 Public Domains Audited)

UK Accountancy & Tax PracticesAvg 72.6/100

ICAEW / ACCA Cyber Essentials v3.3 ('Danzell') & Invoice Fraud Prevention

DMARC p=reject: 85.7%
Strict SPF -all: 42.9%
MTA-STS TLS: 14.3%
HSTS Header: 71.4%

UK Managed Service Providers (MSPs) & HostingAvg 40.6/100

NIS2 Art. 21 Supply-Chain & Multi-Tenant WordPress / PHP2Shell Hardening

DMARC p=reject: 14.3%
Strict SPF -all: 28.6%
MTA-STS TLS: 0.0%
HSTS Header: 71.4%

UK Local Councils & Public SectorAvg 70.0/100

NCSC Public Sector Mail Check (DMARC p=reject + MTA-STS) & CE v3.3

DMARC p=reject: 12.5%
Strict SPF -all: 62.5%
MTA-STS TLS: 50.0%
HSTS Header: 50.0%

UK Housing Associations & PropertyAvg 68.9/100

Tenant Portal WordPress/PHP Hardening & Supplier Posture (NIS2/CE v3.3)

DMARC p=reject: 42.9%
Strict SPF -all: 57.1%
MTA-STS TLS: 57.1%
HSTS Header: 71.4%

UK Healthcare, MedTech & NHS SuppliersAvg 74.0/100

NHS DSPT / Cyber Essentials v3.3 & EU NIS2 Art. 21 Supply-Chain Security

DMARC p=reject: 85.7%
Strict SPF -all: 71.4%
MTA-STS TLS: 14.3%
HSTS Header: 85.7%
// LIVE SECTOR BENCHMARK · UK ACCOUNTANCY & TAX PRACTICES

UK Accountancy & Tax Practices — Public DNS, Email Auth & Web Boundary Matrix

Regulatory & Commercial Driver: ICAEW / ACCA Cyber Essentials v3.3 ('Danzell') & Invoice Fraud Prevention · Sector Average Score: 72.6/100 · DMARC p=reject Rate: 85.7% · MTA-STS Adoption: 14.3%.

UK Public Domain Posture Score DMARC Policy SPF Lookups MTA-STS Observed Public Gaps 1-Click Live Comparator
icaew.com 36/100 (F) quarantine 1/10 lookups MISSING DMARC p=quarantine (not p=reject), Missing SPF, Missing MTA-STS
accaglobal.com 76/100 (B) reject 3/10 lookups MISSING SPF ~all SoftFail (3/10 lookups), Missing MTA-STS, Missing TLS-RPT
bdo.co.uk 76/100 (B) reject 5/10 lookups MISSING SPF ~all SoftFail (5/10 lookups), Missing MTA-STS, Missing TLS-RPT
rsmuk.com 92/100 (A) reject 5/10 lookups PASS No CAA lock
evelyn.com 80/100 (B) reject 7/10 lookups MISSING Missing MTA-STS, Missing TLS-RPT, No CAA lock
azets.co.uk 68/100 (C) reject 1/10 lookups MISSING SPF ~all SoftFail (1/10 lookups), Missing MTA-STS, Missing TLS-RPT
pkf-francisclark.co.uk 80/100 (B) reject 5/10 lookups MISSING Missing MTA-STS, Missing TLS-RPT, No CAA lock
// LIVE SECTOR BENCHMARK · UK MANAGED SERVICE PROVIDERS (MSPS) & HOSTING

UK Managed Service Providers (MSPs) & Hosting — Public DNS, Email Auth & Web Boundary Matrix

Regulatory & Commercial Driver: NIS2 Art. 21 Supply-Chain & Multi-Tenant WordPress / PHP2Shell Hardening · Sector Average Score: 40.6/100 · DMARC p=reject Rate: 14.3% · MTA-STS Adoption: 0.0%.

UK Public Domain Posture Score DMARC Policy SPF Lookups MTA-STS Observed Public Gaps 1-Click Live Comparator
ukfast.co.uk 38/100 (F) none 4/10 lookups MISSING DMARC p=none, Missing MTA-STS, Missing TLS-RPT
iomart.com 10/100 (F) none 8/10 lookups MISSING DMARC p=none, Missing SPF, Missing MTA-STS
claranet.co.uk 26/100 (F) missing 1/10 lookups MISSING Missing _dmarc, SPF ~all SoftFail (1/10 lookups), Missing MTA-STS
redcentricplc.com 52/100 (D) quarantine 7/10 lookups MISSING DMARC p=quarantine (not p=reject), SPF ~all SoftFail (7/10 lookups), Missing MTA-STS
node4.co.uk 26/100 (F) none 1/10 lookups MISSING DMARC p=none, SPF ~all SoftFail (1/10 lookups), Missing MTA-STS
krystal.uk 80/100 (B) reject 4/10 lookups MISSING Missing MTA-STS, Missing TLS-RPT, No CAA lock
fasthosts.co.uk 52/100 (D) quarantine 3/10 lookups MISSING DMARC p=quarantine (not p=reject), SPF ~all SoftFail (3/10 lookups), Missing MTA-STS
// LIVE SECTOR BENCHMARK · UK LOCAL COUNCILS & PUBLIC SECTOR

UK Local Councils & Public Sector — Public DNS, Email Auth & Web Boundary Matrix

Regulatory & Commercial Driver: NCSC Public Sector Mail Check (DMARC p=reject + MTA-STS) & CE v3.3 · Sector Average Score: 70.0/100 · DMARC p=reject Rate: 12.5% · MTA-STS Adoption: 50.0%.

UK Public Domain Posture Score DMARC Policy SPF Lookups MTA-STS Observed Public Gaps 1-Click Live Comparator
redditchbc.gov.uk 84/100 (B) quarantine 5/10 lookups PASS DMARC p=quarantine (not p=reject)
bromsgrove.gov.uk 84/100 (B) quarantine 5/10 lookups PASS DMARC p=quarantine (not p=reject)
wyreforestdc.gov.uk 76/100 (B) quarantine 6/10 lookups PASS DMARC p=quarantine (not p=reject), No CAA lock
cannockchasedc.gov.uk 80/100 (B) reject 5/10 lookups MISSING Missing MTA-STS, Missing TLS-RPT, No CAA lock
tamworth.gov.uk 52/100 (D) quarantine 8/10 lookups MISSING DMARC p=quarantine (not p=reject), SPF ~all SoftFail (8/10 lookups), Missing MTA-STS
lichfielddc.gov.uk 68/100 (C) quarantine 1/10 lookups MISSING DMARC p=quarantine (not p=reject), Missing MTA-STS, No CAA lock
eaststaffsbc.gov.uk 64/100 (C) quarantine 3/10 lookups PASS DMARC p=quarantine (not p=reject), SPF ~all SoftFail (3/10 lookups), No CAA lock
staffsmoorlands.gov.uk 52/100 (D) quarantine 6/10 lookups MISSING DMARC p=quarantine (not p=reject), SPF ~all SoftFail (6/10 lookups), Missing MTA-STS
// LIVE SECTOR BENCHMARK · UK HOUSING ASSOCIATIONS & PROPERTY

UK Housing Associations & Property — Public DNS, Email Auth & Web Boundary Matrix

Regulatory & Commercial Driver: Tenant Portal WordPress/PHP Hardening & Supplier Posture (NIS2/CE v3.3) · Sector Average Score: 68.9/100 · DMARC p=reject Rate: 42.9% · MTA-STS Adoption: 57.1%.

UK Public Domain Posture Score DMARC Policy SPF Lookups MTA-STS Observed Public Gaps 1-Click Live Comparator
clarionhg.com 38/100 (F) none 3/10 lookups MISSING DMARC p=none, Missing MTA-STS, Missing TLS-RPT
peabody.org.uk 64/100 (C) quarantine 5/10 lookups PASS DMARC p=quarantine (not p=reject), SPF ~all SoftFail (5/10 lookups), No CAA lock
lqgroup.org.uk 64/100 (C) quarantine 9/10 lookups MISSING DMARC p=quarantine (not p=reject), Missing MTA-STS, Missing TLS-RPT
placesforpeople.co.uk 68/100 (C) reject 7/10 lookups MISSING SPF ~all SoftFail (7/10 lookups), Missing MTA-STS, Missing TLS-RPT
sanctuary.co.uk 80/100 (B) reject 1/10 lookups PASS SPF ~all SoftFail (1/10 lookups), No CAA lock
nhg.org.uk 76/100 (B) quarantine 4/10 lookups PASS DMARC p=quarantine (not p=reject), No CAA lock
guinnesspartnership.com 92/100 (A) reject 5/10 lookups PASS No CAA lock, No HSTS
// LIVE SECTOR BENCHMARK · UK HEALTHCARE, MEDTECH & NHS SUPPLIERS

UK Healthcare, MedTech & NHS Suppliers — Public DNS, Email Auth & Web Boundary Matrix

Regulatory & Commercial Driver: NHS DSPT / Cyber Essentials v3.3 & EU NIS2 Art. 21 Supply-Chain Security · Sector Average Score: 74.0/100 · DMARC p=reject Rate: 85.7% · MTA-STS Adoption: 14.3%.

UK Public Domain Posture Score DMARC Policy SPF Lookups MTA-STS Observed Public Gaps 1-Click Live Comparator
emishealth.com 68/100 (C) reject 5/10 lookups MISSING SPF ~all SoftFail (5/10 lookups), Missing MTA-STS, Missing TLS-RPT
tpp-uk.com 38/100 (F) none 0/10 lookups MISSING DMARC p=none, Missing MTA-STS, Missing TLS-RPT
civica.com 80/100 (B) reject 4/10 lookups MISSING Missing MTA-STS, Missing TLS-RPT, No CAA lock
allocatesoftware.com 68/100 (C) reject 8/10 lookups MISSING SPF ~all SoftFail (8/10 lookups), Missing MTA-STS, Missing TLS-RPT
bupa.co.uk 80/100 (B) reject 2/10 lookups MISSING Missing MTA-STS, Missing TLS-RPT, No CAA lock
nuffieldhealth.com 92/100 (A) reject 2/10 lookups MISSING Missing MTA-STS
spirehealthcare.com 92/100 (A) reject 6/10 lookups PASS No CAA lock