View all articles
316 articles
How expired certificates can cause service downtime and financial losses
Certificate expiry outages cost enterprises up to $5 million per incident and take hours to resolve. This post covers the financial impact and how to prevent them.
Read moreComplianceUK Cyber Action Plan sets the standard that private businesses must match
The UK Government's £210M Cyber Action Plan raises the bar for public sector resilience. CEO Rahul Powar argues private businesses must now mirror this approach.
Read moreCertificatesCryptographic discovery requires deep infrastructure expertise and big data
Ivan Ristic explains how building a cryptographic discovery platform requires combining deep network infrastructure knowledge with large-scale monitoring of domains, DNS, and certificates.
Read moreCertificatesCertificate Lifecycle Management needs a dedicated monitoring platform
CLM tools manage issuance and renewal, but dedicated monitoring platforms provide the real-time discovery and Certificate Transparency visibility that enterprises actually need.
Read moreCertificatesCertificate Transparency should be the key aspect of your cryptographic discovery strategy
Certificate Transparency logs provide real-time visibility into every certificate issued for your domains. This post explains why CT should anchor your cryptographic discovery strategy.
Read moreCertificatesTowards monthly certificate renewal
Certificate lifetimes are shrinking to 47 days by 2029. This post explains why shorter lifetimes improve security and why automation is now essential for renewal.
Read moreProduct UpdatesIntroducing Red Sift Radar Lite: AI-powered security analysis for everyone
Radar Lite is a free AI-powered tool that evaluates your domain's email authentication, DNS, and website security, then benchmarks your posture against industry peers.
Read moreEmail SecurityMicrosoft backs DMARC as protection against Tycoon 2FA phishing surge
Attackers are using Tycoon 2FA kits to send phishing emails from misconfigured servers. Microsoft now recommends strict DMARC enforcement as the primary defense.
Read moreDMARC52% of US insurance brokers remain vulnerable to email spoofing
52% of the top 50 US insurance brokers have no effective DMARC protection, leaving them vulnerable to spoofing and phishing in an industry built on client trust.
Read moreBrand ProtectionHow brand monitoring could have prevented the $400,000 Costco lobster heist
Criminals stole $400,000 of lobster by spoofing a trucking company's email domain with a single added dash. Real-time brand monitoring would have caught it immediately.
Read moreDMARCWhat is DMARC and how does it work effectively?
DMARC protects domains from unauthorized email by aligning SPF and DKIM results with the visible From address. This guide covers how it works and how to deploy it effectively.
Read moreComplianceRed Sift on G-Cloud 14: Your trusted partner for the NCSC Web Check transition
NCSC discontinued Web Check on March 31, 2026. Red Sift ASM on G-Cloud 14 provides comprehensive attack surface management as the successor for UK public sector organizations.
Read moreEmail SecurityIETF calls for end of ARC experiment: What it means for email authentication
The IETF recommends marking ARC (Authenticated Received Chain) as obsolete after a 10-year experiment. This post explains the implications for email forwarding and authentication.
Read moreProduct UpdatesRed Sift OnDMARC Tops G2's Winter Rankings to Close Out 2025
Red Sift OnDMARC finished 2025 at the top of G2's Winter rankings. Here's what we ranked for and how the year shaped up across the platform.
Read moreDMARCSPF, DKIM, and DMARC: the three protocols protecting your inbox (and why you need all of them)
SPF and DKIM alone can't prevent spoofing because they check different headers. This guide explains how DMARC ties them together to close the gap.
Read moreDMARCFinding the right DMARC monitoring tool: A practical guide for security teams
A practical guide for choosing the right DMARC monitoring tool based on your organization's maturity — from basic reporting needs to full enterprise enforcement.
Read moreDNS4 free tools for quick email security testing
Four free tools from Red Sift to audit your email authentication in minutes: Investigate for DMARC, SPF Checker, BIMI Checker, and Blacklist Checker.
Read moreEmail SecurityDMARC, DKIM, SPF & BIMI: 5-minute playbook for Security and Marketing
A quick-reference playbook for security and marketing teams covering SPF, DKIM, DMARC, and BIMI — what each does, why all four matter, and how to implement them.
Read moreDMARCHow to simplify DMARC, SPF, and DKIM management
Managing email authentication is complex — SPF lookup limits, DKIM key rotation, configuration drift. This post shows how OnDMARC simplifies the path to full enforcement.
Read moreDMARCBest enterprise DMARC solution: Red Sift OnDMARC
Red Sift OnDMARC unifies DMARC, SPF, DKIM, BIMI, and MTA-STS management in one platform, with the fastest enforcement timeline and dynamic DNS optimization for enterprise environments.
Read more