Who Actually Pays for Email Security? Across a Million Domains, Just 5.2% Run a Dedicated Gateway
We classified 1.05 million domains by mail provider in LLMSE's index. Only 5.2% route mail through a dedicated enterprise email-security gateway; the rest rely on the built-in filtering of business, hosting, or consumer email. Within that thin security tier, Proofpoint, Mimecast and Barracuda hold 67% of the market. Set against $2.77 billion in 2024 Business Email Compromise losses and strict DMARC enforcement on just 2.5% of domains, the web's dedicated email defenses are concentrated in a small, well-resourced minority.