DMARC

Only 44% of the Mid-Atlantic's top organizations block spoofed email

Apr 7, 20269 min read

Red Sift analyzed 700 Mid-Atlantic domains and found only 44% have full DMARC enforcement. See the state-by-state breakdown and how to close the gap.

Read more
DNS

NIST DNS update: What this means for your organization

Mar 25, 20265 min read

NIST SP 800-81 Revision 3 reframes DNS as an active security layer for the first time since 2013. Here's what changed and why it matters for DMARC, SPF, and DKIM.

Read more
DMARC

60% of the U.S. Northeast's top organizations are vulnerable to phishing

Mar 18, 20268 min read

An analysis of 700 domains across seven Northeast U.S. states found that only 35% have reached full DMARC enforcement, with significant variation between states and industries.

Read more
DMARC

50% of Boston's top organizations lack full DMARC protection

Feb 16, 20265 min read

Red Sift analyzed 99 domains from Boston's largest organizations and found nearly half (49.5%) haven't reached DMARC enforcement, leaving them open to spoofing and BEC.

Read more
DMARC

43% of Washington D.C.'s top organizations vulnerable to phishing

Feb 16, 20265 min read

Red Sift analyzed 100 domains from Washington D.C.'s largest organizations and found 43% lack DMARC enforcement — right where US cybersecurity policy is made.

Read more
DMARC

Over a quarter of New York's top organizations still exposed to email spoofing

Feb 16, 20265 min read

Red Sift analyzed 99 domains from New York's largest organizations. While 72.7% have reached DMARC enforcement, 27 domains remain exposed to email spoofing.

Read more
Email Security

Microsoft backs DMARC as protection against Tycoon 2FA phishing surge

Jan 8, 20266 min read

Attackers are using Tycoon 2FA kits to send phishing emails from misconfigured servers. Microsoft now recommends strict DMARC enforcement as the primary defense.

Read more
DMARC

52% of US insurance brokers remain vulnerable to email spoofing

Jan 5, 20264 min read

52% of the top 50 US insurance brokers have no effective DMARC protection, leaving them vulnerable to spoofing and phishing in an industry built on client trust.

Read more
DMARC

What is DMARC and how does it work effectively?

Dec 10, 20258 min read

DMARC protects domains from unauthorized email by aligning SPF and DKIM results with the visible From address. This guide covers how it works and how to deploy it effectively.

Read more
DNS

4 free tools for quick email security testing

Dec 1, 20254 min readJack Lilley

Four free tools from Red Sift to audit your email authentication in minutes: Investigate for DMARC, SPF Checker, BIMI Checker, and Blacklist Checker.

Read more
Email Security

DMARC, DKIM, SPF & BIMI: 5-minute playbook for Security and Marketing

Dec 1, 20253 min read

A quick-reference playbook for security and marketing teams covering SPF, DKIM, DMARC, and BIMI — what each does, why all four matter, and how to implement them.

Read more
DMARC

Finding the right DMARC monitoring tool: A practical guide for security teams

Dec 1, 20255 min read

A practical guide for choosing the right DMARC monitoring tool based on your organization's maturity — from basic reporting needs to full enterprise enforcement.

Read more
DMARC

SPF, DKIM, and DMARC: the three protocols protecting your inbox (and why you need all of them)

Dec 1, 20255 min read

SPF and DKIM alone can't prevent spoofing because they check different headers. This guide explains how DMARC ties them together to close the gap.

Read more
DMARC

How to simplify DMARC, SPF, and DKIM management

Dec 1, 20253 min read

Managing email authentication is complex — SPF lookup limits, DKIM key rotation, configuration drift. This post shows how OnDMARC simplifies the path to full enforcement.

Read more
DMARC

Best enterprise DMARC solution: Red Sift OnDMARC

Nov 27, 20255 min read

Red Sift OnDMARC unifies DMARC, SPF, DKIM, BIMI, and MTA-STS management in one platform, with the fastest enforcement timeline and dynamic DNS optimization for enterprise environments.

Read more
DMARC

Top platforms for enterprise DMARC enforcement: Technical comparison for Security Leaders

Nov 24, 20254 min read

A technical comparison of 7 enterprise DMARC platforms, evaluating automation, API integration, and time-to-enforcement. Red Sift OnDMARC leads with 6-8 week enforcement.

Read more
DMARC

Over 40% of essential services companies remain vulnerable to phishing

Nov 18, 20256 min read

Red Sift's analysis of 840 companies in chemical, energy, and water sectors found 42% lack DMARC protection, leaving critical infrastructure exposed to email threats.

Read more
Email Security

41% of top Fintech companies are vulnerable to email phishing

Nov 4, 20255 min read

Only 26% of leading Fintechs enforce DMARC at p=reject, leaving the majority exposed to spoofing and phishing attacks in a heavily targeted industry.

Read more