Bank DMARC Adoption: 55% of the Smallest US Banks Enforce It, vs 100% of the Largest
Bank DMARC adoption is lower than the big-bank studies suggest. As of November 11, 2026, we checked the public DNS of 4,118 FDIC-insured institutions: 72% enforce DMARC with quarantine or reject, 44% use p=reject, and 9% have no valid record. Banks under $100 million enforce at 55%; banks over $100 billion at 100%.
Key findings
- 72% of 4,118 FDIC-insured banks enforce DMARC (quarantine or reject) on the domain they list as their website, and 44% use the strictest setting, p=reject.
- Enforcement rises with size: 55% of banks under $100 million enforce, against 100% of the 31 banks with $100 billion or more in assets.
- 9% of banks (386) publish no valid DMARC record at all, which Gmail requires of anyone sending 5,000 or more messages a day to personal Gmail accounts.
- FDIC-designated community banks enforce at 71%, against 82% for all other insured institutions.
- Of banks that receive mail, 40% point their MX record straight at Microsoft 365 and 46% route it through a filtering gateway such as Proofpoint or Barracuda; Google Workspace handles 1.0%.
- Only 75 banks (1.8%) publish a BIMI record backed by a mark certificate, the setup that shows a verified logo in Gmail.
- Among the 28 states with at least 50 banks, enforcement runs from 48% in Georgia to 85% in Nebraska.
Share enforcing DMARC, by total assets
FDIC BankFind Suite, assets as of June 30, 2026. DNS checked November 11, 2026. Free to cite and republish with a link.
The asset-size gradient
The bank DMARC studies in the current top search results sample the biggest names: dmarcian’s top 100 global banks by revenue, and a 25-bank category in DMARCdrift’s monthly scan, which reports 92% of those at p=reject. That sample is the top of a staircase. Across the full list of 4,118 insured institutions, enforcement climbs from 55% to 81% across the three bands below $10 billion, holds at 80% from $10 billion to $100 billion, and reaches 100% above that: a gap of 45 percentage points from bottom to top.
The smallest band is where missing records cluster: 21% of banks under $100 million publish no valid DMARC record, against 0% of banks at $100 billion and up. Monitoring-only p=none, which collects reports but asks receivers to take no action on mail that fails, covers 24% of the smallest band and 0% of the largest.
| Segment | Banks | Any DMARC | p=none | p=quarantine | p=reject | Enforcing | rua reports | SPF -all | Logo (VMC/CMC) | DNSSEC |
|---|---|---|---|---|---|---|---|---|---|---|
| Under $100M | 486 | 79% | 24% | 25% | 30% | 55% | 59% | 63% | 0.2% | 12% |
| $100M to $1B | 2,604 | 90% | 19% | 30% | 42% | 72% | 76% | 62% | 0.3% | 27% |
| $1B to $10B | 875 | 96% | 15% | 27% | 54% | 81% | 89% | 52% | 3.8% | 35% |
| $10B to $100B | 122 | 98% | 17% | 20% | 61% | 80% | 97% | 43% | 15.6% | 34% |
| $100B and up | 31 | 100% | 0% | 3% | 97% | 100% | 100% | 61% | 41.9% | 19% |
| Community banks (FDIC flag) | 3,715 | 90% | 19% | 29% | 42% | 71% | 76% | 61% | 0.7% | 27% |
| Not community banks | 403 | 96% | 14% | 19% | 64% | 82% | 91% | 45% | 11.9% | 29% |
| All banks | 4,118 | 91% | 18% | 28% | 44% | 72% | 78% | 59% | 1.8% | 27% |
Share of institutions in each row. Any DMARC = a single valid v=DMARC1 record with p=none, quarantine or reject. Logo = BIMI record with an a= certificate URL. DNSSEC = DS record present for the domain at the parent zone.
Small banks versus large banks, control by control
Splitting at $10 billion in assets (3,965 banks below, 153 at or above), the gap is widest for the controls that take sustained work: p=reject (43% vs 68%), requesting aggregate reports (77% vs 97%) and a verified inbox logo (1.1% vs 21%). It disappears or reverses for the rest. Nearly every bank publishes SPF, smaller banks end it in the strict -all more often (60% vs 46%), and DNSSEC signing is close to even (27% vs 31%).
MTA-STS, which tells sending servers to require TLS when delivering to the bank, is rare at every size: 2.6% of banks at $10 billion and up and 2.1% below. Google requires a Verified Mark Certificate or Common Mark Certificate, plus a DMARC policy of quarantine or reject, before Gmail shows a BIMI logo. Among the 15 largest institutions, those publishing p=reject plus a certificate-backed BIMI logo include JPMorgan Chase Bank, National Association; Bank of America, National Association; Wells Fargo Bank, National Association; Goldman Sachs Bank USA; Capital One, National Association; TD Bank, National Association.
Who runs bank email: Microsoft, gateways and the rest
Of the 4,118 banks, 3,968 have mail exchanger (MX) records on their website domain; the other 150 receive mail elsewhere or not at all, and are still counted in the DMARC figures because an unprotected domain can be spoofed whether or not it receives mail.
40% of banks with MX records hand inbound mail straight to Microsoft 365. Another 46% put a filtering gateway in front, and in 81% of those the SPF record or autodiscover entry points to Microsoft 365 behind it, against 1.2% for Google. Adding Microsoft 365 behind gateways to direct Microsoft 365, 77% of banks with mail run on Microsoft. The inbound setup says little about DMARC: banks behind a gateway enforce at 73% and banks on direct Microsoft 365 at 76%, and within the $100 million to $1 billion band alone the figures are 72% and 76%. DMARC is a DNS record the bank publishes for mail sent under its own name, so putting a gateway in front of inbound mail does not set it.
| Gateway in MX | Banks | Share of gateway banks | Enforcing DMARC | p=reject |
|---|---|---|---|---|
| Proofpoint | 713 | 39% | 72% | 50% |
| Barracuda | 352 | 19% | 68% | 42% |
| Mimecast | 284 | 16% | 79% | 54% |
| OpenText (Zix / AppRiver) | 281 | 15% | 77% | 45% |
| Cisco Secure Email | 77 | 4% | 82% | 34% |
| SpamTitan | 30 | 2% | 50% | 17% |
The “other host or provider” group (450 banks) is fragmented: its most common MX domains are secureyourmail.com (109), USA.NET (96), emailservice.io (31), Intermedia (30).
Who reads the reports
78% of banks ask receivers to send aggregate DMARC reports (rua). 40% of those banks send the reports to an address on their own domain; the rest mostly use specialist report-processing services. The most common destinations, named as neutral market facts:
| rua destination domain | Banks | Share of banks with rua |
|---|---|---|
| bank’s own domain | 1,268 | 40% |
| dmarcian.com | 258 | 8% |
| encirca.com | 183 | 6% |
| bankonitusa.com | 173 | 5% |
| proofpoint.com | 155 | 5% |
| easydmarc.us | 122 | 4% |
| vali.email | 105 | 3% |
| dmarcanalyzer.com | 100 | 3% |
Bank DMARC adoption by state
Banks are assigned to the state of their headquarters in BankFind. Click a column to sort. States with fewer than 10 banks are marked with an asterisk on the map; read their percentages as a handful of institutions.
| State | Banks | Any DMARC | Enforcing | p=reject | No valid record | Microsoft 365 MX | Gateway MX | Median assets |
|---|---|---|---|---|---|---|---|---|
| Alabama | 89 | 85% | 62% | 27% | 15% | 24% | 62% | $354M |
| Alaska | 5 | 100% | 100% | 40% | 0% | 40% | 40% | $890M |
| Arizona | 12 | 83% | 67% | 42% | 17% | 55% | 27% | $214M |
| Arkansas | 77 | 94% | 82% | 40% | 6% | 47% | 40% | $517M |
| California | 113 | 94% | 77% | 50% | 6% | 47% | 41% | $1,175M |
| Colorado | 63 | 94% | 65% | 40% | 6% | 30% | 45% | $330M |
| Connecticut | 25 | 92% | 84% | 44% | 8% | 67% | 25% | $1,255M |
| Delaware | 14 | 100% | 79% | 64% | 0% | 29% | 64% | $745M |
| District Of Columbia | 4 | 100% | 100% | 75% | 0% | 50% | 25% | $758M |
| Federated States Of Micronesia | 1 | 100% | 100% | 100% | 0% | n/a | n/a | $278M |
| Florida | 80 | 98% | 81% | 55% | 2% | 36% | 55% | $626M |
| Georgia | 120 | 82% | 48% | 30% | 18% | 23% | 68% | $331M |
| Guam | 2 | 50% | 50% | 0% | 50% | 50% | 0% | $1,714M |
| Hawaii | 6 | 100% | 50% | 50% | 0% | 17% | 67% | $8,272M |
| Idaho | 10 | 100% | 90% | 70% | 0% | 40% | 60% | $1,019M |
| Illinois | 307 | 90% | 70% | 41% | 10% | 43% | 40% | $300M |
| Indiana | 87 | 90% | 77% | 38% | 10% | 42% | 45% | $456M |
| Iowa | 223 | 94% | 80% | 50% | 6% | 40% | 44% | $277M |
| Kansas | 181 | 84% | 69% | 46% | 16% | 55% | 21% | $208M |
| Kentucky | 118 | 86% | 65% | 20% | 14% | 51% | 39% | $304M |
| Louisiana | 103 | 88% | 55% | 24% | 12% | 48% | 45% | $378M |
| Maine | 22 | 100% | 86% | 59% | 0% | 50% | 40% | $1,634M |
| Maryland | 26 | 92% | 81% | 46% | 8% | 32% | 52% | $808M |
| Massachusetts | 89 | 92% | 80% | 47% | 8% | 26% | 58% | $1,082M |
| Michigan | 70 | 93% | 81% | 56% | 7% | 41% | 48% | $470M |
| Minnesota | 220 | 89% | 66% | 42% | 11% | 31% | 58% | $219M |
| Mississippi | 56 | 79% | 61% | 38% | 21% | 34% | 39% | $456M |
| Missouri | 189 | 92% | 70% | 42% | 8% | 30% | 53% | $333M |
| Montana | 34 | 79% | 74% | 47% | 21% | 56% | 25% | $241M |
| Nebraska | 131 | 93% | 85% | 42% | 7% | 42% | 50% | $257M |
| Nevada | 13 | 92% | 92% | 77% | 8% | 58% | 33% | $446M |
| New Hampshire | 16 | 100% | 88% | 69% | 0% | 47% | 40% | $695M |
| New Jersey | 48 | 92% | 67% | 46% | 8% | 38% | 40% | $894M |
| New Mexico | 28 | 93% | 71% | 50% | 7% | 32% | 44% | $441M |
| New York | 99 | 90% | 77% | 34% | 10% | 47% | 33% | $1,025M |
| North Carolina | 36 | 92% | 58% | 22% | 8% | 33% | 61% | $606M |
| North Dakota | 59 | 88% | 61% | 39% | 12% | 35% | 58% | $293M |
| Ohio | 153 | 90% | 74% | 50% | 10% | 42% | 43% | $286M |
| Oklahoma | 165 | 95% | 79% | 62% | 5% | 22% | 41% | $303M |
| Oregon | 12 | 92% | 67% | 50% | 8% | 45% | 55% | $745M |
| Pennsylvania | 107 | 91% | 70% | 48% | 9% | 43% | 46% | $675M |
| Puerto Rico | 4 | 100% | 75% | 75% | 0% | 75% | 0% | $15,633M |
| Rhode Island | 5 | 100% | 100% | 60% | 0% | 60% | 20% | $3,153M |
| South Carolina | 42 | 88% | 67% | 43% | 12% | 27% | 68% | $584M |
| South Dakota | 54 | 83% | 72% | 35% | 17% | 58% | 29% | $327M |
| Tennessee | 108 | 85% | 66% | 36% | 15% | 33% | 57% | $474M |
| Texas | 339 | 95% | 84% | 53% | 5% | 49% | 38% | $437M |
| U.S. Virgin Islands | 1 | 100% | 100% | 100% | 0% | 100% | 0% | $506M |
| Utah | 42 | 93% | 76% | 57% | 7% | 30% | 60% | $2,787M |
| Vermont | 12 | 92% | 75% | 33% | 8% | 33% | 33% | $608M |
| Virginia | 56 | 98% | 75% | 48% | 2% | 43% | 53% | $1,036M |
| Washington | 27 | 89% | 52% | 37% | 11% | 52% | 33% | $1,019M |
| West Virginia | 38 | 89% | 74% | 42% | 11% | 50% | 39% | $348M |
| Wisconsin | 153 | 92% | 69% | 50% | 8% | 26% | 65% | $404M |
| Wyoming | 24 | 83% | 62% | 50% | 17% | 46% | 46% | $339M |
Microsoft 365 MX and gateway MX are shares of the state’s banks that have MX records. Median assets in millions of dollars, June 30, 2026 reports.
By charter and regulator
Charter and primary regulator matter less than size. National banks (OCC) enforce at 74%, state member banks (Federal Reserve) at 76% and state nonmember banks (FDIC) at 72%. The lowest group is the 42 state savings and loan associations, at 57%.
| Segment | Banks | Any DMARC | p=none | p=quarantine | p=reject | Enforcing | rua reports | SPF -all | Logo (VMC/CMC) | DNSSEC |
|---|---|---|---|---|---|---|---|---|---|---|
| National bank (OCC) [N] | 650 | 91% | 17% | 28% | 46% | 74% | 80% | 55% | 4.5% | 24% |
| State member bank (Fed) [SM] | 687 | 94% | 18% | 27% | 48% | 76% | 83% | 63% | 1.7% | 31% |
| State nonmember bank (FDIC) [NM] | 2,325 | 90% | 19% | 29% | 43% | 72% | 76% | 60% | 0.9% | 27% |
| Savings bank (state) [SB] | 194 | 89% | 18% | 28% | 43% | 71% | 75% | 59% | 4.6% | 25% |
| Savings institution (OCC) [SI] | 220 | 88% | 19% | 28% | 41% | 69% | 78% | 48% | 1.8% | 30% |
| Savings and loan (state) [SL] | 42 | 74% | 17% | 21% | 36% | 57% | 57% | 64% | 0.0% | 26% |
What Gmail and Yahoo require, and how banks measure up
Google’s sender FAQ adds that “Starting November 2025, Gmail is ramping up its enforcement on non-compliant traffic,” with “temporary and permanent rejections,” and that a domain counts as a bulk sender permanently once it crosses the threshold. The DNS-visible part of that floor is an SPF record plus any DMARC record: 90% of banks meet it on their website domain, and 77% of banks under $100 million. DKIM, the third requirement, cannot be checked from DNS without knowing each bank’s selector names, so it is not measured here. Yahoo publishes its own sender requirements on its Sender Hub; that page returned only a consent screen to our fetcher, so we quote Google alone.
Gmail’s floor is p=none. The stronger benchmark in US public policy is CISA’s Binding Operational Directive 18-01, issued October 16, 2017, which gave federal civilian agencies one year to set “a DMARC policy of ‘reject’ for all second-level domains and mail-sending hosts.” 44% of insured banks meet that standard today. We did not cite the FFIEC IT Examination Handbook: its site’s robots.txt disallows all automated access, and we did not find another primary bank-regulator document that names DMARC. The current DMARC specification is RFC 9989 (2026), which replaced RFC 7489 and dropped the pct tag that let senders apply a policy to only part of their mail.
What this means for MSPs and bank IT teams
If you support community banks, the opening is specific. Roughly 352 banks under $1 billion have no valid DMARC record and another 597 sit at p=none. Moving a bank from p=none to p=reject is mostly inventory work: list every service that sends as the bank’s domain (core banking notices, online banking alerts, loan origination, marketing platforms), get each one passing SPF or DKIM alignment, and read the rua reports for several weeks before each policy step. Point rua at a mailbox or service someone reads; 30% of p=none banks request no reports at all, which makes p=none pointless. For banks already at reject, the next DNS-level controls are DNSSEC (27% of smaller banks), MTA-STS with TLS reporting, and BIMI if the bank has a registered trademark. Our DMARC adoption statistics show how banks compare with the wider web, and the Microsoft 365 market share census covers the same mail-provider method across public companies and .gov domains. For the threat side, see phishing statistics from four primary sources.
Frequently asked questions
What percentage of banks use DMARC?
In our November 11, 2026 scan of 4,118 FDIC-insured institutions, 91% published a DMARC record on their website domain, 72% enforced it with quarantine or reject, and 44% used p=reject.
Do small banks have DMARC?
Most do, but fewer enforce it. Among 486 banks under $100 million in assets, 79% have a DMARC record and 55% enforce it. 21% have no valid record.
Do the largest US banks use DMARC p=reject?
14 of the 15 largest insured institutions by assets publish p=reject on their listed website domain, including JPMorgan Chase Bank, National Association; Bank of America, National Association; Citibank, National Association; Wells Fargo Bank, National Association; Goldman Sachs Bank USA.
Is DMARC required for banks?
We did not find a primary federal banking regulation that names DMARC. Gmail requires DMARC (at least p=none) from senders of 5,000 or more messages a day to personal Gmail accounts, a threshold a bank emailing its customers can reach. Federal civilian agencies have had to use p=reject since CISA’s Binding Operational Directive 18-01 in 2017.
What email provider do most banks use?
Microsoft. 40% of banks with mail records point their MX directly at Microsoft 365, and in the 46% that use a filtering gateway, SPF records name Microsoft 365 behind the gateway 81% of the time. Google Workspace receives mail directly for 1.0%.
How can a bank check its DMARC record?
Query the TXT record at _dmarc followed by the bank’s domain (for example with nslookup or dig). A record starting v=DMARC1 with p=reject or p=quarantine is enforced; p=none only monitors. 18% of banks in our scan were at p=none.
Free to cite and republish with a link. The CSV holds aggregates by asset band, community bank flag, charter, state and mail setup; it contains no per-bank results.
Methodology
Population. Every active FDIC-insured institution in the FDIC BankFind Suite institutions API (4,212 records, financial data as of June 30, 2026, retrieved November 11, 2026). 70 records list no web address, 6 had a domain whose lookups did not complete, and 18 list a domain that no longer exists in DNS. That leaves 4,118 institutions on 4,086 distinct registered domains.
Domain. The registered domain of the WEBADDR field (for example www.examplebank.com becomes examplebank.com), using the Public Suffix List. A bank may send customer mail from a different domain; we measure the domain it lists as its website, which is the one customers see and attackers imitate.
Checks. Passive DNS lookups only, through Google Public DNS over HTTPS, at most 5 concurrent queries and 40 a second: MX; apex TXT (SPF); _dmarc TXT; default._bimi TXT; _mta-sts TXT; _smtp._tls TXT; DS; and, where MX is not Microsoft or Google, the SPF include chain (up to 8 lookups) and the autodiscover CNAME to infer the mailbox platform behind a gateway. No mail was sent, no web pages were requested, and nothing was probed. 1 domains were re-queried through Quad9 after resolver errors.
Definitions. Enforcing = exactly one DMARC record whose p tag is quarantine or reject. No valid record = no record, more than one record, or a missing or unknown p tag. Asset bands use BankFind total assets. Community bank = the FDIC’s CB flag. Mail provider = the provider of the lowest-preference MX hosts, classified by host name.
Limitations. DKIM is not measured. A p=reject record does not prove every sending service aligns. The pct tag is ignored when classifying; 79 enforcing banks set pct below 100. Holding companies with several charters can share one domain, so they appear once per charter.
Privacy. Results for individual banks are not published. Banks are named on this page only for positive facts (p=reject, verified logo) or as service providers.
Not advice. This is a measurement of public DNS records, not a security assessment of any institution.
Cite as:The Uptime Report. "Bank DMARC Adoption: 55% of the Smallest US Banks Enforce It, vs 100% of the Largest." November 2026. https://theuptimereport.com/bank-dmarc-adoption/
References
- FDIC BankFind Suite API, institutions endpoint. Accessed November 2026.
- Google, Email sender guidelines. Accessed November 2026.
- Google, Email sender guidelines FAQ. Accessed November 2026.
- Google, Set up BIMI. Accessed November 2026.
- CISA, Binding Operational Directive 18-01. Accessed November 2026.
- RFC 9989, Domain-Based Message Authentication, Reporting, and Conformance (DMARC). Accessed November 2026.
- dmarcian, DMARC Status of Top 100 Global Banks. Accessed November 2026.
- DMARCdrift, DMARC Adoption Across the Web. Accessed November 2026.
- Google Public DNS (DNS over HTTPS JSON API). Accessed November 2026.
Research library
More original data reports from The Uptime Report. Every report includes its methodology and a free CSV download. Browse all research
Threats and breaches
- AT&T Data Breach Settlement Payout Date
AT&T payout status, tiers, incident history - Microsoft Data Breach History
Microsoft incidents by type, 2020 to 2026 - IC3 Report 2025
IC3 losses, crime types, states per capita - AI Incidents Statistics 2026
AI incidents by year, harm type, company - Cyber Attacks 2026
Every 2026 cyber attack, primary-sourced - WordPress Vulnerabilities
WordPress plugin, theme and core CVEs - Hypervisor Vulnerabilities
Hypervisor CVEs vs exploitation - DMARC Adoption Statistics 2026
DMARC enforcement, 15,000 domains - RMM Vulnerabilities and Remote Access Flaws
RMM and remote access flaws in KEV - Identity Theft Statistics 2026
ID theft per 100K by state and type - Scam Statistics 2026
FTC fraud losses by channel and age - VPN Vulnerabilities by Vendor
VPN gateway KEV and CVEs by vendor - MFA Statistics 2026
MFA methods across 2,571 services - Password Statistics 2026
12,674 passwords tested against HIBP - Ransomware Groups 2026
Most active ransomware groups, ranked - Ransomware Statistics 2026
Leak-site victims by month since 2021 - Malicious npm Packages
Malicious npm packages, day by day - Cybersecurity Statistics 2026
70 sourced stats, every number traced - Zero-Day Statistics
Every tracked zero-day since 2014 - Phishing Statistics 2026
Four phishing measures, one evidence board - Patch Tuesday Statistics 2026
Every Microsoft CVE since 2021 - Disaster Declarations by State
FEMA data for continuity planning - Data Breach Statistics 2026
980 breaches in Have I Been Pwned - Ransomware Initial Access Vectors
CISA advisories coded by entry technique - CVE Statistics 2026
Vulnerabilities published per year, NIST NVD - How Long Do Companies Take to Report a Data Breach?
1,675 Washington notices - Known Exploited Vulnerabilities
The CISA KEV catalog analyzed - Healthcare Data Breach Report 2026
HHS OCR breach portal scorecard - Ransomware Reported to the FBI
Five-year IC3 trend - ConnectWise ScreenConnect Vulnerabilities
ScreenConnect CVEs dated, with version lookup - SonicWall Vulnerabilities 2026
SonicWall CVEs by product line and KEV year - Dental Practice Data Breaches 2026
Every 2026 dental breach on the HHS portal - Apple Zero Days 2026 List
Every Apple-flagged CVE, with KEV dates - Android Zero Days 2026
Android flags by layer, OEM patch lag - Auto Dealership Data Breach 2026 Tracker
Dealer and vendor breaches by state filing - Law Firm Data Breaches 2026
Every law firm AG notice, sized and dated - Accounting Firm Data Breach 2026
CPA breach notices against the tax calendar - MSP Email Security
MSP DMARC and SPF, 1,430 domains - Credit Union Cybersecurity Statistics 2026
55% of credit unions skip DMARC - Citrix NetScaler Vulnerabilities 2026
48 NetScaler CVEs, 6 exploited, build checker - Fortinet Vulnerabilities 2026
Every 2026 Fortinet CVE, by product - Okta Vulnerabilities
Okta CVEs and incidents, two ledgers - Veeam Vulnerabilities
Veeam CVEs, fixed builds, KEV flags - Atlassian Confluence Vulnerabilities
Confluence CVEs, KEV and LTS fixes - SolarWinds Vulnerabilities
338 SolarWinds CVEs, 11 exploited in KEV - SAP NetWeaver Vulnerabilities
Every SAP NetWeaver CVE, by Patch Day - N-able Vulnerabilities
N-able CVEs, fixed builds and KEV flags
Infrastructure and uptime
- Data Centers Using Nuclear Power
Every US nuclear deal, by NRC stage - Claude Outage History
934 Claude incidents by model and hour - AMD vs Nvidia Market Share Over Time
AMD vs Nvidia share: Steam and SEC filings - iPhone Market Share by Country 2026
iPhone share in every country - Android Market Share by Version 2026
Android versions and patch status - OpenAI Outage History
1,051 OpenAI incidents, causes coded - Data Center Construction Spending 2026
Data center build spending, Census monthly - Microsoft End of Support 2026
Every 2026 Microsoft support cutoff - Fiber Internet Availability by State 2026
Fiber by state, build pace, top providers - 5G Coverage Map 2026
5G by state and carrier, FCC data - Cell Phone Outage History
FCC outages, DIRS cell sites, 911 fines - Mac Market Share 2026
Mac desktop share by country and version - Browser Market Share 2026
Browser share since 2009, by platform - Microsoft 365 Market Share 2026
Who runs email: Microsoft vs Google - CrowdStrike Outage
July 19, 2024 outage, minute by minute - Data Center Electricity Prices 2026
Power prices vs data center load, by state - Average Internet Bill 2026
Home internet prices by speed and state - Search Engine Market Share 2026
Search share since 2009, by country - ChatGPT Market Share 2026
AI chatbot referral share, every tracker - Google Cloud Outage History
Google Cloud incidents by product, 2013 on - Azure Outage History
Every Azure PIR, coded by root cause - Data Center Water Usage 2026
Water by site, company and drought - AI Energy Consumption 2026
Big Tech electricity vs US demand - SSD Prices 2026
NAND price cycle from makers’ filings - RAM Prices 2026
DRAM prices from producers’ filings - Domain Name Statistics 2026
Domains by TLD, renewals, registrars - Linux Market Share 2026
Linux desktop share, every headline traced - GitHub Outages
GitHub incidents by month since 2020 - Cloudflare Outage History
Every Cloudflare outage post-mortem - Starlink Statistics 2026
Satellites, subscribers, coverage, outages - Internet Access Statistics 2026
Home internet gaps by state and group - SQL Server End of Life
SQL Server support countdown + CVEs - Windows 11 Market Share 2026
Windows 10 vs 11 share by country - Cloud Computing Statistics 2026
Hyperscaler revenue and capex, SEC data - AWS Outage History
Every AWS Post-Event Summary since 2011 - Data Centers by State 2026
Sites, jobs, power for every state - Data Center Statistics 2026
Data center power, spending, jobs - 99.9% Uptime
Uptime calculator and 35 real SLAs - Power Outage Statistics by State
Outage hours by state, EIA data - Cost of Downtime
Revenue per hour for 3,001 public companies - Windows Server End of Life
Support dates and CVEs per server version - SQL Server 2016 ESU Cost
ESU cost calculator, every formula - Slack Outage History
1,459 Slack entries, SLA history, ledger - Google Workspace vs Microsoft 365 in US Schools
Google vs Microsoft in 10,591 districts - Block GPTBot
AI crawler blocks across top 10k sites - security.txt Adoption 2026
Who publishes a valid security.txt - Government Email Security 2026
.gov DMARC: local 40% vs federal 88% - Government Website Security 2026
.gov web security scored by state - vSphere 8 End of Support
vSphere 8 dates, exploited flaws by version - Office 2019 End of Life
Office 2019 EOL: who still gets patches - Zoom Outage History
Every Zoom incident since 2015 - Office 2021 End of Life
177 flaws fixed a month after support ended - Exchange Server 2019 End of Life
Exchange 2019 EOL, ESU builds and CVEs - FortiOS 7.0 End of Life
FortiOS 7.0 dates, builds and unfixed flaws
Regulation and disclosure
- Are Ransomware Payments Illegal? Law by Jurisdiction
Who may pay a ransom, by jurisdiction - HIPAA Security Rule Changes 2026
Security Rule status: current vs proposed - FTC Safeguards Rule Breach Notification
500-consumer, 30-day FTC breach duty - Data Center Moratorium by State 2026
Moratoria and bans in every state - State Privacy Laws 2026
23 state privacy laws, compared - State AI Laws 2026
131 state AI laws, dates and penalties - FedRAMP Statistics 2026
FedRAMP authorizations, GSA data - Item 1C Cybersecurity Disclosures
What 600 10-Ks say in Item 1C - CMMC Certification Statistics 2026
CMMC demand vs assessor capacity - Data Brokers List 2026
728 brokers across three state registries - SEC Cybersecurity Incident Disclosures
Every 8-K Item 1.05 filing - HIPAA Enforcement Tracker
Every OCR penalty and settlement - CMMC Level 2 Assessment Cost
CMMC Level 2 cost estimator, DoD figures - Safe Harbor Cybersecurity Laws by State
10 states, 11 laws, framework grid
Workforce and pay
- Intel Layoff Tracker
Every Intel WARN notice, by site and date - Amazon Layoffs by State
Amazon WARN notices, state by state - Oracle Layoffs by State
Oracle WARN notices and restructuring cost - Cloud Architect vs Cloud Engineer Salary
Architect vs engineer pay, H-1B filings - Entry Level DevOps Engineer Salary
Entry level DevOps pay, H-1B filings - Microsoft Layoff History Timeline
Every round dated, 2009 to 2026 - Google Layoffs by Year
Notices, headcount, severance by year - AI Engineer vs ML Engineer Salary
AI vs ML engineer pay, from H-1B filings - Data Engineer Salary by Experience
Data engineer pay by DOL wage level - Most Popular Programming Languages 2026
Language ranks by country, GitHub data - Computer Science Graduates Per Year
CS degrees per year, IPEDS 2011 to 2024 - Data Scientist Salary 2026
Data scientist pay ladder and metros, BLS - Web Developer Salary 2026
Web dev vs software pay by state, BLS - AI at Work Statistics 2026
Worker AI use: ever, weekly, daily, by job - Network Engineer Salary 2026
Network engineer vs admin pay, BLS - IT Manager Salary 2026
IT manager pay by industry, BLS OEWS - Software Engineer Salary 2026
Developer pay by metro, BLS OEWS - H-1B Statistics 2026
H-1B lottery, employers, and wages - AI Layoffs 2026
AI-blamed job cuts, sourced to filings - Help Desk Salary 2026
Help desk hourly pay, BLS OEWS - Cybersecurity Salary 2026
Security pay percentiles, BLS OEWS - Women in Tech Statistics 2026
Women’s share of tech jobs since 2011 - IT Unemployment Rate 2026
Tech vs national jobless rate, monthly - Tech Job Postings 2026
Tech postings vs 2020, by role and country - Tech Layoffs 2026
Tech layoffs from state WARN notices - Remote Work Statistics 2026
Telework by job, industry, and state - Highest Paying Cities for IT Jobs 2026
Metro pay by role, BLS OEWS - The Tech Job Market in 2026
Openings, quits, hires, layoffs - IT Salaries by State 2026
Pay matrix for four IT roles - IT and Cybersecurity Jobs Outlook 2026
BLS employment projections - Salesforce Layoffs by State
Salesforce WARN notices, state by state - Dell Layoffs by Year
Headcount, severance, notices by year - IBM Layoffs by Year
IBM workforce charges against headcount - Meta Layoffs by Year
Meta rounds, sites and headcount by year - IT Director vs IT Manager Salary
IT director vs manager pay, H-1B filings - Penetration Tester Salary Entry Level
Entry level pen test pay, H-1B filings - Site Reliability Engineer vs DevOps Salary
SRE vs DevOps pay, H-1B filings - Solutions Architect vs Software Engineer Salary
Architect vs engineer pay, Level I to IV - Data Engineer vs Data Analyst Salary
Data engineer vs analyst pay, H-1B ledger - Network Engineer vs System Administrator Salary
Network engineer vs sysadmin pay by state - Security Analyst vs Security Engineer Salary
Analyst vs engineer pay, step by step - Cloud Engineer vs DevOps Engineer Salary
Cloud vs DevOps pay by metro, H-1B - Cisco Layoffs by Year
Cisco cuts by year: charges vs staff - Database Administrator vs Data Engineer Salary
DBA vs data engineer pay, reconciled - Penetration Tester vs Security Engineer Salary
Pen tester vs engineer pay: near tie - Help Desk vs Desktop Support Salary
Help desk vs desktop pay, one BLS code
MSP market and spending
- AI Capex 2026
Big Tech capex vs cash flow, SEC data - Cybersecurity Budget 2027
Federal and CISA cyber budgets, benchmarks - Microsoft 365 Price Increase 2026
Every M365 price change, vs inflation - Computer Prices 2026
Computer price indexes and HS 8471 imports - MSP Market Size 2026
Managed services market, built from Census - Small Business AI Adoption 2026
AI use by firm size, sector, state, Census - Cyber Insurance Statistics
Cyber insurance market, NAIC 2015-2024 - IT Spending by Industry
IT investment by industry, BEA - IT Services Industry Growth 2026
Census revenue by service industry - IT Hourly Rates 2026
Hourly IT labor rates, GSA contracts - VoIP Statistics 2026
Business VoIP vs landlines, FCC - MSP Industry Statistics 2026
Jobs, wages, and firms, BLS QCEW - Federal IT Spending 2026
IT services contracts, USAspending - IT Services Firms by State
Census business patterns atlas - How Much Do MSPs Charge Per User?
Published MSP prices, 1,310 websites - VMware Price Increase Broadcom Timeline
Broadcom VMware changes and revenue, dated - Adobe Price Increase History
Every Adobe price change, vs inflation - Atlassian Price Increase History, 2019 to 2026
Every Atlassian price hike, dated - Zoom Price Increase 2026
Every Zoom price change since 2013
Leave a Reply