Skip to main content
A+

microsoft.com

Email security grade A+ · 95/100

As of 2026-07-01 15:41 UTC

Score breakdown

Policy strictness 30/30

p=reject (full enforcement)

Alignment mode 10/15

relaxed alignment (default; safer for forwarders)

Reporting 15/15

both rua (aggregate) and ruf (forensic) configured

Percent at fail position 10/10

no pct tag in play; your policy applies to all failing mail

Authentication coverage 20/20

both SPF and DKIM published

MTA-STS 5/5

MTA-STS enforce mode

TLS-RPT 5/5

TLS-RPT record published

Monitor microsoft.com

Get alerted when this grade changes or a new DMARC failure shows up.

Monitor this domain

The other half: lookalike domains

A strong DMARC grade stops attackers spoofing microsoft.com directly. It does nothing about typosquat domains (microsoft-login.com and friends). Scan for those next.

Run a lookalike-domain scan →