Only Half of All Fortune 500 are Bolstering Email Security

Only Half of All Fortune 500 are Bolstering Email Security

Agari’s data shows that 51 percent of the Fortune 500, the world’s wealthiest companies, are using DMARC, an improvement from about one-third of them a year ago.

Just half of Fortune 500 companies have installed DMARC, a tool that guards against email phishing scams, according to new data from Agari.

Email systems use DMARC—domain-based message authentication, reporting and conformance policy—to verify the identity of an email sender to help protect against email phishing scams. Depending on the DMARC settings, an email system can monitor, quarantine or reject emails trying to impersonate another domain.

Agari’s data shows that 51 percent of the Fortune 500, the world’s wealthiest companies, are using DMARC, an improvement from about one-third of them a year ago. Only 13 of these companies have their DMARC capabilities set to mark spoofed emails as spam or reject them from inboxes.

Among the companies with the strongest DMARC policies were Aetna, American Express, Bank of America, Capital One, Facebook, Fedex, Microsoft, Netflix, PayPal, UPS and Wells Fargo. Among the worst, according to Agari, were Boeing, CBS, Discovery, Exxon Mobil, Frontier, JetBlue, NetApp, Time Warner Cable (Spectrum), Prudential, Viacom and Xerox.

Phishers often try to trick companies or other people into sending back sensitive information or secret corporate details by imitating trusted email domains. DMARC is designed to weed out most of those spoofed emails.

According to Agari, one of its customers was receiving millions of emails a day that were imitating the company’s own “from” domain. After the company implemented its new DMARC policy, set to rejected spoofed emails, the number of spoofed emails decreased by 99 percent.

“The damage from these attacks has ballooned into billions of dollars annually—however the real cost is the erosion of trust in digital business,” Agari’s Armen Najarian said.

About the Author

Jessica Davis is the Associate Content Editor for 1105 Media.

Featured

  • Report: 47 Percent of Security Service Providers Are Not Yet Using AI or Automation Tools

    Trackforce, a provider of security workforce management platforms, today announced the launch of its 2025 Physical Security Operations Benchmark Report, an industry-first study that benchmarks both private security service providers and corporate security teams side by side. Based on a survey of over 300 security professionals across the globe, the report provides a comprehensive look at the state of physical security operations. Read Now

    • Guard Services
  • Identity Governance at the Crossroads of Complexity and Scale

    Modern enterprises are grappling with an increasing number of identities, both human and machine, across an ever-growing number of systems. They must also deal with increased operational demands, including faster onboarding, more scalable models, and tighter security enforcement. Navigating these ever-growing challenges with speed and accuracy requires a new approach to identity governance that is built for the future enterprise. Read Now

  • Eagle Eye Networks Launches AI Camera Gun Detection

    Eagle Eye Networks, a provider of cloud video surveillance, recently introduced Eagle Eye Gun Detection, a new layer of protection for schools and businesses that works with existing security cameras and infrastructure. Eagle Eye Networks is the first to build gun detection into its platform. Read Now

  • Report: AI is Supercharging Old-School Cybercriminal Tactics

    AI isn’t just transforming how we work. It’s reshaping how cybercriminals attack, with threat actors exploiting AI to mass produce malicious code loaders, steal browser credentials and accelerate cloud attacks, according to a new report from Elastic. Read Now

  • Pragmatism, Productivity, and the Push for Accountability in 2025-2026

    Every year, the security industry debates whether artificial intelligence is a disruption, an enabler, or a distraction. By 2025, that conversation matured, where AI became a working dimension in physical identity and access management (PIAM) programs. Observations from 2025 highlight this turning point in AI’s role in access control and define how security leaders are being distinguished based on how they apply it. Read Now

New Products

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.