Blog
News, tips and insights about email security.
The $3 billion email problem: What the FBI's 2025 IC3 report means for the DACH mid-market
BEC caused $3 billion in losses per the FBI 2025 IC3 report. For DACH mid-market under NIS2, regulatory and financial risk now align — DMARC remains overlooked.
Read more
What Is DANE? — Anchor Certificates in DNS
DANE binds TLS certificates to DNS, protecting inbound email against downgrades and forged certs. How TLSA records work, MTA-STS comparison, DANE setup.
Read more
What Is DNSSEC? — Sign and Verify DNS Answers
DNSSEC protects against DNS spoofing and cache poisoning via cryptographically signed responses. How it works, how to activate it, and why it matters for DANE.
Read more
Why 46% of All Emails Fail DMARC — And Why Much of It Is Friendly Fire
Cloudflare 2026: nearly half of 450M analyzed emails failed DMARC. Much of it is legitimate mail broken in transit — five common causes and what senders can do.
Read more
DACH Email Security 2026: 503 Domains
SPF, DMARC, MTA-STS and DNSSEC analyzed across 503 DACH domains: a significant enforcement gap, especially in education and government.
Read moreDMARC Enforcement Gap: p=none Is Not Enough
Most domains have a DMARC record — but fewer than 1 in 3 actually enforce it. Why so many get stuck in monitoring mode and how to move to full protection.
Read moreWhat Is BIMI? — Brand Logos in Email
BIMI lets you display your brand logo next to your emails in supporting inboxes. Learn how it works, what you need to set it up, and how it connects to DMARC.
Read moreWhat Is MTA-STS? — TLS for Inbound Email
MTA-STS lets domain owners enforce encrypted connections for inbound email. How the standard works, how to set it up, and why it matters for email security.
Read moreWhat Is TLS-RPT? Encryption Reports
TLS-RPT gives you visibility into TLS failures from inbound mail servers. How to set it up and why it is essential for email security monitoring.
Read moreWhat Is Domain Connect? — Email Security
Domain Connect simplifies DNS configuration for DMARC, SPF and DKIM. Learn how the protocol works, which providers support it, and what you need to get started.
Read more