What your Domain Trust Score means

Your Domain Trust Score is a 0-100 number combining policy strength, alignment rate, supporting record health, and behavioural signals.

Bands

  • 0-39 (Poor) — no DMARC, p=none with weak SPF, or active spoofing on the wire
  • 40-59 (Fair) — p=none with reasonable alignment, or p=quarantine without supporting records
  • 60-79 (Good) — p=quarantine + healthy SPF/DKIM/MTA-STS, or p=reject with minor gaps
  • 80-100 (Excellent) — p=reject + aligned subdomain policy + MTA-STS enforced + TLS-RPT live

What moves it most

  • Going from p=none to p=quarantine: roughly +15 points
  • Going from p=quarantine to p=reject: roughly +10 points
  • Adding MTA-STS in enforce mode: +5
  • Closing all unaligned legitimate senders: +5 to +15

p=none always caps you

A domain with p=none scores 0 on the policy axis and is hard-capped at 59 (Fair) regardless of how clean its alignment is. We do not let p=none reach Good.