Plain-English guides to email security, DMARC, and protecting your domain - no jargon, no filler.
Sector guides
UK education is one of the most spoofed and least protected sectors. This guide explains where schools, multi-academy trusts and universities stand on email authentication in 2026, and the practical route to enforcement.
News & analysis
UK law firms are among the best-protected sectors for email - yet 1 in 10 can still be spoofed, in the sector where email payment fraud is the single most common cyberattack.
News & analysis
Every UK accountancy firm we checked has a DMARC record - the best adoption of any sector - but 1 in 8 left it switched off at p=none, and is spoofable as a result.
News & analysis
UK financial services lead every sector on DMARC enforcement and verified-logo BIMI - yet only 12% enforce inbound encryption, and 1 in 10 can still be spoofed.
News & analysis
UK charities are the sector most likely to set up DMARC and then stall at p=none - leaving 25-29% spoofable despite having 'done it'. The findings and the fix.
News & analysis
Healthcare is the UK's most impersonable sector - and NHS trusts are more exposed than private hospitals. 52% of NHS trust domains can be spoofed. What it means and what to do.
Comparisons
How SealedMail compares to Red Sift OnDMARC: an enterprise platform versus a right-sized, flat-price managed service for UK SMEs.
Comparisons
How SealedMail compares to EasyDMARC, who each suits, and why a managed report-by-email service fits non-technical UK teams.
Comparisons
How SealedMail compares to dmarcian: a deep self-serve platform versus a managed, plain-English weekly report read by a UK specialist.
Comparisons
How SealedMail compares to Sendmarc: partner/MSP-led management versus direct, flat-price, plain-English DMARC monitoring.
News & analysis
We checked 198 major UK organisations and found around 1 in 5 can still be spoofed by email. The sector-by-sector findings.
Explainer
The .com you bought defensively, the old trading name, the hyphenated variant - every domain you own but never send from can be spoofed as freely as your main one. Securing each takes three DNS records and five minutes. Most businesses haven’t done it.
We use privacy-friendly, self-hosted analytics and a sampled, masked session-replay tool to find usability problems. Nothing is shared with third parties, and these load only if you accept. See our Privacy Policy.