Original research from ATS Connection
Cyber Security Research for UK Businesses
We study how well UK organisations protect themselves, using public data that anyone can check. Each study publishes its method in full, names no organisation and is free to quote.
From the ATS Connection team, offices in Arundel and Chichester.
Featured study
71.9%
of 1,924 Sussex businesses and charities do not enforce DMARC, leaving their email domain open to spoofing.
Read the Sussex reportPublished research
Our studies
Each report covers what we checked, what we found, how we did it and what organisations can do about it.
UK Law Firm Email Security Report 2026
59.6%
We checked the DMARC, SPF and mail records of 1,307 UK law firms. Three in five do not enforce DMARC, and among firms with 10 or fewer staff it is four in five.
Read the report: UK Law Firm Email Security Report 2026Sussex Business Email Security Report 2026
71.9%
We checked 1,924 businesses and charities across East and West Sussex. Almost three in four do not enforce DMARC, and no town in the county does well.
Read the report: Sussex Business Email Security Report 2026UK Accountancy Firm Email Security Report 2026
68.1%
We checked 1,322 UK accountancy firms. More than two in three do not enforce DMARC, and more than a third have no DMARC record at all.
Read the report: UK Accountancy Firm Email Security Report 2026Care and Health Provider Email Security Report 2026
83.4%
We checked 10,774 CQC-registered care homes, home care agencies, dental practices and clinics in England. More than four in five do not enforce DMARC, and half have no record at all.
Read the report: Care and Health Provider Email Security Report 2026UK Cyber Essentials Uptake Report 2026
3.3
Cyber Essentials certificates for every 100 UK employers, from government data. Uptake is up 40% in two years, but only about 7 in 100 small businesses are covered.
Read the report: UK Cyber Essentials Uptake Report 2026UK Law Firm Email Security: year two
We will repeat the law firm study each year with the same method, so the profession can see whether things are improving.
How we research
Simple checks, done properly.
Our research uses the same checks we run for clients every week, applied across a whole sector at once. The aim is to show where the real gaps are and how cheaply most of them can be closed.
- Public data only. We look only at information any mail server or browser can see, such as DNS records. We never access anyone’s systems.
- No organisation named. We publish totals and percentages. Individual results are never shared.
- Method in full. Every report sets out the sample, the checks, the date and the limitations, so the figures can be tested.
- Free to quote. Journalists, trade bodies and businesses are welcome to use the figures with a credit and a link to the report.
For journalists: we can supply charts, regional or sector breakdowns and comment. Call us on 01903 255 159.
