progressive.com

Email security grade D · 50/100

As of 2026-07-19 06:22 UTC

Score breakdown

Policy strictness 5/30

p=none (monitor only; would be 20 at quarantine, 30 at reject)

Learn more about policy strictness →

Alignment mode 10/15

relaxed alignment (default; safer for forwarders)

Learn more about alignment mode →

Reporting 15/15

both rua (aggregate) and ruf (forensic) configured

Learn more about reporting →

Percent at fail position 10/10

no pct tag in play; your policy applies to all failing mail

Learn more about percent at fail position →

Authentication coverage 10/20

SPF only; both should be present for DMARC to align reliably

Learn more about authentication coverage →

MTA-STS 0/5

no MTA-STS policy published

Learn more about mta-sts →

TLS-RPT 0/5

no TLS-RPT record (you won't see TLS failure reports)

Learn more about tls-rpt →

Monitor progressive.com

Get alerted when this grade changes or a new DMARC failure shows up.

Monitor this domain

The other half: lookalike domains

A strong DMARC grade stops attackers spoofing progressive.com directly. It does nothing about typosquat domains (progressive-login.com and friends). Scan for those next.

Run a lookalike-domain scan →

Embed this grade as a live badge → See trending grades →