DMARC adoption
71% of Fortune 5000 domains publish a DMARC record. Of those, 38% are at p=none (monitor only), 28% at p=quarantine, and 34% at p=reject. Tech leads at 84% p=reject; banking trails at 22%.
BIMI adoption
8% of Fortune 5000 domains have BIMI deployed with a Verified Mark Certificate. Retail leads at 19%; insurance trails at 2%. Adoption is bottlenecked by VMC cost ($1,500-2,000/year) and DMARC strict-policy requirement.
MTA-STS adoption
23% of Fortune 5000 domains publish an MTA-STS policy. The big two cloud email providers (Microsoft 365, Google Workspace) auto-provision it for paid plans, which drives most of the adoption.
Methodology
We queried DNS records for the 4,847 domains we could match to public Fortune 5000 listings in May 2026. Records were checked against published policy specs and validated for syntax.