Exposure Library / Domains / Mail

Technology domain · Mail

Who is allowed to send as you?

Email authentication tells the world which servers may send mail for a domain. Without it, impersonation is easy. The scan checks the records and the mail servers behind them.

Trusted by leading carriers and brokers

Johnson Kendall Johnson
Crum & Forster
Allied World
Trium Property
Sullivan Group
Profinity
Intact Insurance
Munich Re
Old Republic Cyber
What the scan checks

What it looks for.

SPF

Which servers may send mail for the domain.

DKIM

Signatures that prove a message was not altered.

DMARC

The policy that tells receivers what to do with mail that fails.

Mail servers

Internet-facing mail software matched to known vulnerabilities.

Why it matters

The underwriting view.

Missing or monitor-only email authentication makes it easy to send mail that looks like it came from the company, the starting point for most business email compromise.

Representative finding
DomainMail
FindingNo DMARC policy published for the primary domain
PerilsSocial Engineering
Hazard categoryMissing email authentication (SPF, DKIM, DMARC)
Where it showsRisk Detections; Mitigating Controls shows email security in place
Drives these perils

Linked losses.

See the domain × peril grid →

Back-test us against your own book.

Send five past submissions you’ve already bound, conditioned or declined. We score them blind, then put our read next to the call you made.