UK Sector Security & Email Posture Benchmarks. Scan Your Firm & Deploy the Fix.
Our 8-core UK diagnostic lab continuously audits public DNS-over-HTTPS (1.1.1.1) records, DMARC p=reject enforcement, SPF ≤10 lookup health, _mta-sts TLS policies, and web boundary headers across 43 public UK organisations in 6 sectors—plus rolling 24h UK Certificate Transparency (*.co.uk / *.org.uk) telemetry.
Compare Your Domain Against Any UK Sector in 3 Seconds
Enter your organisation's domain below (or click any sector's Scan Your Firm Against This Sector → button) to run a live 6-control Cloudflare 1.1.1.1 DoH check and get your exact GBP Fix Pack + 24h Async Fiverr remediation match:
Live UK Sector Posture Scorecards (43 Public Domains Audited)
UK Legal & SolicitorsAvg 66.6/100
SRA Client Account Anti-Spoofing & Cyber Essentials v3.3
p=reject: 71.4%-all: 28.6%UK Accountancy & Tax PracticesAvg 72.6/100
ICAEW / ACCA Cyber Essentials v3.3 ('Danzell') & Invoice Fraud Prevention
p=reject: 85.7%-all: 42.9%UK Managed Service Providers (MSPs) & HostingAvg 40.6/100
NIS2 Art. 21 Supply-Chain & Multi-Tenant WordPress / PHP2Shell Hardening
p=reject: 14.3%-all: 28.6%UK Local Councils & Public SectorAvg 70.0/100
NCSC Public Sector Mail Check (DMARC p=reject + MTA-STS) & CE v3.3
p=reject: 12.5%-all: 62.5%UK Housing Associations & PropertyAvg 68.9/100
Tenant Portal WordPress/PHP Hardening & Supplier Posture (NIS2/CE v3.3)
p=reject: 42.9%-all: 57.1%UK Healthcare, MedTech & NHS SuppliersAvg 74.0/100
NHS DSPT / Cyber Essentials v3.3 & EU NIS2 Art. 21 Supply-Chain Security
p=reject: 85.7%-all: 71.4%UK Legal & Solicitors — Public DNS, Email Auth & Web Boundary Matrix
Regulatory & Commercial Driver: SRA Client Account Anti-Spoofing & Cyber Essentials v3.3 · Sector Average Score: 66.6/100 · DMARC p=reject Rate: 71.4% · MTA-STS Adoption: 28.6%.
| UK Public Domain | Posture Score | DMARC Policy | SPF Lookups | MTA-STS | Observed Public Gaps | 1-Click Live Comparator |
|---|---|---|---|---|---|---|
lawsociety.org.uk |
50/100 (D) | none |
8/10 lookups |
PASS |
DMARC p=none, No CAA lock, No HSTS | |
sra.org.uk |
68/100 (C) | reject |
1/10 lookups |
MISSING |
SPF ~all SoftFail (1/10 lookups), Missing MTA-STS, Missing TLS-RPT | |
stephensons.co.uk |
68/100 (C) | reject |
1/10 lookups |
MISSING |
SPF ~all SoftFail (1/10 lookups), Missing MTA-STS, Missing TLS-RPT | |
irwinmitchell.com |
68/100 (C) | reject |
4/10 lookups |
MISSING |
SPF ~all SoftFail (4/10 lookups), Missing MTA-STS, Missing TLS-RPT | |
slatergordon.co.uk |
52/100 (D) | quarantine |
5/10 lookups |
MISSING |
DMARC p=quarantine (not p=reject), SPF ~all SoftFail (5/10 lookups), Missing MTA-STS | |
shoosmiths.com |
100/100 (A+) | reject |
1/10 lookups |
PASS |
All baseline DNS controls active | |
freeths.co.uk |
60/100 (C) | reject |
1/10 lookups |
MISSING |
Missing SPF, Missing MTA-STS, Missing TLS-RPT |
UK Accountancy & Tax Practices — Public DNS, Email Auth & Web Boundary Matrix
Regulatory & Commercial Driver: ICAEW / ACCA Cyber Essentials v3.3 ('Danzell') & Invoice Fraud Prevention · Sector Average Score: 72.6/100 · DMARC p=reject Rate: 85.7% · MTA-STS Adoption: 14.3%.
| UK Public Domain | Posture Score | DMARC Policy | SPF Lookups | MTA-STS | Observed Public Gaps | 1-Click Live Comparator |
|---|---|---|---|---|---|---|
icaew.com |
36/100 (F) | quarantine |
1/10 lookups |
MISSING |
DMARC p=quarantine (not p=reject), Missing SPF, Missing MTA-STS | |
accaglobal.com |
76/100 (B) | reject |
3/10 lookups |
MISSING |
SPF ~all SoftFail (3/10 lookups), Missing MTA-STS, Missing TLS-RPT | |
bdo.co.uk |
76/100 (B) | reject |
5/10 lookups |
MISSING |
SPF ~all SoftFail (5/10 lookups), Missing MTA-STS, Missing TLS-RPT | |
rsmuk.com |
92/100 (A) | reject |
5/10 lookups |
PASS |
No CAA lock | |
evelyn.com |
80/100 (B) | reject |
7/10 lookups |
MISSING |
Missing MTA-STS, Missing TLS-RPT, No CAA lock | |
azets.co.uk |
68/100 (C) | reject |
1/10 lookups |
MISSING |
SPF ~all SoftFail (1/10 lookups), Missing MTA-STS, Missing TLS-RPT | |
pkf-francisclark.co.uk |
80/100 (B) | reject |
5/10 lookups |
MISSING |
Missing MTA-STS, Missing TLS-RPT, No CAA lock |
UK Managed Service Providers (MSPs) & Hosting — Public DNS, Email Auth & Web Boundary Matrix
Regulatory & Commercial Driver: NIS2 Art. 21 Supply-Chain & Multi-Tenant WordPress / PHP2Shell Hardening · Sector Average Score: 40.6/100 · DMARC p=reject Rate: 14.3% · MTA-STS Adoption: 0.0%.
| UK Public Domain | Posture Score | DMARC Policy | SPF Lookups | MTA-STS | Observed Public Gaps | 1-Click Live Comparator |
|---|---|---|---|---|---|---|
ukfast.co.uk |
38/100 (F) | none |
4/10 lookups |
MISSING |
DMARC p=none, Missing MTA-STS, Missing TLS-RPT | |
iomart.com |
10/100 (F) | none |
8/10 lookups |
MISSING |
DMARC p=none, Missing SPF, Missing MTA-STS | |
claranet.co.uk |
26/100 (F) | missing |
1/10 lookups |
MISSING |
Missing _dmarc, SPF ~all SoftFail (1/10 lookups), Missing MTA-STS | |
redcentricplc.com |
52/100 (D) | quarantine |
7/10 lookups |
MISSING |
DMARC p=quarantine (not p=reject), SPF ~all SoftFail (7/10 lookups), Missing MTA-STS | |
node4.co.uk |
26/100 (F) | none |
1/10 lookups |
MISSING |
DMARC p=none, SPF ~all SoftFail (1/10 lookups), Missing MTA-STS | |
krystal.uk |
80/100 (B) | reject |
4/10 lookups |
MISSING |
Missing MTA-STS, Missing TLS-RPT, No CAA lock | |
fasthosts.co.uk |
52/100 (D) | quarantine |
3/10 lookups |
MISSING |
DMARC p=quarantine (not p=reject), SPF ~all SoftFail (3/10 lookups), Missing MTA-STS |
UK Local Councils & Public Sector — Public DNS, Email Auth & Web Boundary Matrix
Regulatory & Commercial Driver: NCSC Public Sector Mail Check (DMARC p=reject + MTA-STS) & CE v3.3 · Sector Average Score: 70.0/100 · DMARC p=reject Rate: 12.5% · MTA-STS Adoption: 50.0%.
| UK Public Domain | Posture Score | DMARC Policy | SPF Lookups | MTA-STS | Observed Public Gaps | 1-Click Live Comparator |
|---|---|---|---|---|---|---|
redditchbc.gov.uk |
84/100 (B) | quarantine |
5/10 lookups |
PASS |
DMARC p=quarantine (not p=reject) | |
bromsgrove.gov.uk |
84/100 (B) | quarantine |
5/10 lookups |
PASS |
DMARC p=quarantine (not p=reject) | |
wyreforestdc.gov.uk |
76/100 (B) | quarantine |
6/10 lookups |
PASS |
DMARC p=quarantine (not p=reject), No CAA lock | |
cannockchasedc.gov.uk |
80/100 (B) | reject |
5/10 lookups |
MISSING |
Missing MTA-STS, Missing TLS-RPT, No CAA lock | |
tamworth.gov.uk |
52/100 (D) | quarantine |
8/10 lookups |
MISSING |
DMARC p=quarantine (not p=reject), SPF ~all SoftFail (8/10 lookups), Missing MTA-STS | |
lichfielddc.gov.uk |
68/100 (C) | quarantine |
1/10 lookups |
MISSING |
DMARC p=quarantine (not p=reject), Missing MTA-STS, No CAA lock | |
eaststaffsbc.gov.uk |
64/100 (C) | quarantine |
3/10 lookups |
PASS |
DMARC p=quarantine (not p=reject), SPF ~all SoftFail (3/10 lookups), No CAA lock | |
staffsmoorlands.gov.uk |
52/100 (D) | quarantine |
6/10 lookups |
MISSING |
DMARC p=quarantine (not p=reject), SPF ~all SoftFail (6/10 lookups), Missing MTA-STS |
UK Housing Associations & Property — Public DNS, Email Auth & Web Boundary Matrix
Regulatory & Commercial Driver: Tenant Portal WordPress/PHP Hardening & Supplier Posture (NIS2/CE v3.3) · Sector Average Score: 68.9/100 · DMARC p=reject Rate: 42.9% · MTA-STS Adoption: 57.1%.
| UK Public Domain | Posture Score | DMARC Policy | SPF Lookups | MTA-STS | Observed Public Gaps | 1-Click Live Comparator |
|---|---|---|---|---|---|---|
clarionhg.com |
38/100 (F) | none |
3/10 lookups |
MISSING |
DMARC p=none, Missing MTA-STS, Missing TLS-RPT | |
peabody.org.uk |
64/100 (C) | quarantine |
5/10 lookups |
PASS |
DMARC p=quarantine (not p=reject), SPF ~all SoftFail (5/10 lookups), No CAA lock | |
lqgroup.org.uk |
64/100 (C) | quarantine |
9/10 lookups |
MISSING |
DMARC p=quarantine (not p=reject), Missing MTA-STS, Missing TLS-RPT | |
placesforpeople.co.uk |
68/100 (C) | reject |
7/10 lookups |
MISSING |
SPF ~all SoftFail (7/10 lookups), Missing MTA-STS, Missing TLS-RPT | |
sanctuary.co.uk |
80/100 (B) | reject |
1/10 lookups |
PASS |
SPF ~all SoftFail (1/10 lookups), No CAA lock | |
nhg.org.uk |
76/100 (B) | quarantine |
4/10 lookups |
PASS |
DMARC p=quarantine (not p=reject), No CAA lock | |
guinnesspartnership.com |
92/100 (A) | reject |
5/10 lookups |
PASS |
No CAA lock, No HSTS |
UK Healthcare, MedTech & NHS Suppliers — Public DNS, Email Auth & Web Boundary Matrix
Regulatory & Commercial Driver: NHS DSPT / Cyber Essentials v3.3 & EU NIS2 Art. 21 Supply-Chain Security · Sector Average Score: 74.0/100 · DMARC p=reject Rate: 85.7% · MTA-STS Adoption: 14.3%.
| UK Public Domain | Posture Score | DMARC Policy | SPF Lookups | MTA-STS | Observed Public Gaps | 1-Click Live Comparator |
|---|---|---|---|---|---|---|
emishealth.com |
68/100 (C) | reject |
5/10 lookups |
MISSING |
SPF ~all SoftFail (5/10 lookups), Missing MTA-STS, Missing TLS-RPT | |
tpp-uk.com |
38/100 (F) | none |
0/10 lookups |
MISSING |
DMARC p=none, Missing MTA-STS, Missing TLS-RPT | |
civica.com |
80/100 (B) | reject |
4/10 lookups |
MISSING |
Missing MTA-STS, Missing TLS-RPT, No CAA lock | |
allocatesoftware.com |
68/100 (C) | reject |
8/10 lookups |
MISSING |
SPF ~all SoftFail (8/10 lookups), Missing MTA-STS, Missing TLS-RPT | |
bupa.co.uk |
80/100 (B) | reject |
2/10 lookups |
MISSING |
Missing MTA-STS, Missing TLS-RPT, No CAA lock | |
nuffieldhealth.com |
92/100 (A) | reject |
2/10 lookups |
MISSING |
Missing MTA-STS | |
spirehealthcare.com |
92/100 (A) | reject |
6/10 lookups |
PASS |
No CAA lock |