← Research Hub Full State Rankings Report Get Your Free Scorecard →

U.S. Public Sector Email Security — 51-Jurisdiction Rankings

DMARC Adoption Rankings Across All 50 States & District of Columbia
MonitorWorkspace
March 2026
69,892 Entities • 51 Jurisdictions
DMARC adoption ranges from 66.3% (DC) to 22.8% (ND) — a 43.5-point gap that reflects policy, funding, and infrastructure disparities across states
51
Jurisdictions
DC
Best DMARC (66.3%)
ND
Worst DMARC (22.8%)
47.2%
National Avg DMARC
43.5pp
Best vs Worst Gap
14.2%
Avg Proxy Rate

Top 10 States — DMARC Adoption

#StateEntitiesSPFDMARCProxy
1District of Columbia8385.5%66.3%7.6%
2Massachusetts58888.4%62.2%21.8%
3Connecticut32482.7%60.5%21.4%
4Oregon50487.3%60.3%13.3%
5New York2,21780.7%59.4%20.1%
6Maryland21484.1%58.4%23.1%
7Louisiana15381.7%58.2%16.5%
8Wisconsin1,14786.7%57.4%11.9%
9Washington59681.9%55.5%13.0%
10Maine / Virginia55.3%

Bottom 10 States — DMARC Adoption

#StateEntitiesSPFDMARCProxy
51North Dakota49255.3%22.8%7.4%
50South Dakota44550.3%23.6%16.4%
49Hawaii1942.1%31.6%12.5%
48West Virginia28568.4%30.5%8.1%
47Nebraska54163.8%31.8%15.1%
46Mississippi37473.8%31.8%17.1%
45Florida2,09962.1%34.5%21.0%
44Kansas84574.7%34.9%9.4%
43Delaware9461.7%36.2%16.1%
42Alaska13877.5%36.2%9.0%

What drives state rankings: The top states share two traits — higher proxy/gateway adoption rates and denser urban entity populations where IT capacity is stronger. Louisiana ranks 7th despite low domain coverage (24.5%), suggesting the entities that do have domains are well-managed. States in the bottom tier often have high counts of small rural entities with minimal IT support.

Largest States by Entity Count

StateEntitiesDomain %DMARCRank
Illinois3,98153.4%43.9%#30
Pennsylvania3,57650.7%50.0%#17
Ohio3,51263.2%44.9%#25
California3,80161.3%44.8%#27
Texas6,36573.0%46.9%#21

High Proxy — Interesting Outliers

StateDMARCProxy %Note
Nevada53.8%30.5%Highest proxy rate
Georgia41.5%23.5%High proxy, low DMARC
Maryland58.4%23.1%#6 overall
Massachusetts62.2%21.8%#2 overall
North Dakota22.8%7.4%Low proxy = low DMARC

Research Collaboration

State Policy Analysis
Full 51-jurisdiction dataset with entity-level breakdowns available for academic research, CISA alignment studies, or state legislative briefings.
Custom State Reports
Generate targeted reports for a specific state — entity-type breakdown, county-level analysis, and peer comparison vs neighboring states.
Longitudinal Tracking
Annual re-scans enable tracking of state adoption improvements year-over-year — valuable for measuring impact of state-level cybersecurity mandates.
Proposed next step: Request a state-specific deep-dive report or benchmark your entity against all 51 jurisdictions.
Contact: monitorworkspace.com/scorecard