Does email security translate to market value?

There’s been a lot of attention focused on the public markets lately, so I spent a bit of time looking at how our customers have performed vs. the broader equity market since the pandemic began. The results are quite interesting.

The chart below shows a market-cap weighted index of Red Sift’s 25 largest listed customers vs the S&P500. We have also split the S&P into three different indexes based on their components’ DMARC compliance status.

A few observations

First, and most strikingly, the index of Red Sift customers significantly outperforms the market – by 43%. This is not as surprising as it may seem. Companies who choose Red Sift tend to be more focused on using software to gain efficiency and greater capability through automation – including but not only with their choice of cybersecurity vendor. Often, they are either technology companies themselves or understand that all companies are technology companies now.

Looking at the S&P500 at large

We split this into three other component indices based on their members’ email security compliance status with DMARC. So the “DMARC Compliance” index is made up only of the S&P500 members who are effectively blocking email impersonations on their domain, while the “DMARC reporting” index is made up of those companies who have started implementing DMARC but haven’t progressed to compliance, and finally, the last group who hasn’t bothered with DMARC at all. (What is DMARC?)

Here the results are just as telling: DMARC-compliant companies outperform the wider S&P500 by 7% (light blue line), while those with no DMARC at all underperformed by nearly 6% over the last 12 months (brown line) and those in DMARC reporting unperformed a bit less (2%, the green line).

This represents a whopping difference of $1.52 trillion in value over the year.

Of course, email security does not usually directly drive equity value, and this post is not trying to suggest that. However, one can hypothesise that companies with their email security house in order tend to be that way because they have the right decision frameworks in place. These decision frameworks have a higher chance of leading to the right outcome whether that is in the field of equity growth or cybersecurity. That said, breaches can very directly wipe millions off the value of a company – so this really is two birds with one stone. Email security is consistently near the top of the list for companies who have their priorities right.

So what are you waiting for to sort out your outbound email authentication? Use our free Investigate tool to find out how secure your email security setup really is.

Check email DMARC setup


Nadim Lahoud

10 Mar. 2021



Recent Posts


Preventing certificate related violations in cybersecurity frameworks:  A guide to certificate monitoring…

Rebecca Warren

TLS is one of the most widely adopted security protocols in the world allowing for unprecedented levels of commerce across the internet.  At the core of the TLS protocol is TLS certificates. Organizations must deploy TLS certificates and corresponding private keys to their systems to provide them with unique identities that can be reliably…

Read more

Red Sift ASM & Red Sift Certificates: the missing link in your…

Billy McDiarmid

According to Gartner, Attack Surface Management (ASM) refers to the “processes, technology and managed services deployed to discover internet-facing enterprise assets and systems and associated exposures which include misconfigured public cloud services and servers.” This broad category of tooling is used within Continuous Threat Exposure Management (CTEM) programs, with many vendors within it having…

Read more

The best tools to protect yourself from SubdoMailing

Francesca Rünger-Field

In late February 2024, ‘SubdoMailing’ became a trending search term overnight. Research by Guardio Labs uncovered a massive-scale phishing campaign that had been going on since at least 2022. At the time of reporting, the campaign had sent 5 million emails a day from more than 8,000 compromised domains and 13,000 subdomains with several…

Read more
Product Release

Red Sift’s Spring 2024 Quarterly Product Release

Francesca Rünger-Field

This early into 2024, the cybersecurity space is already buzzing with activity. Emerging standards, such as Google and Yahoo’s bulk sender requirements, mark a new era of compliance for businesses reliant on email communication. At the same time, the prevalence of sophisticated cyber threats, such as the SubdoMailing campaign, emphasizes the continual hurdles posed…

Read more