惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

PCI Perspectives
PCI Perspectives
Microsoft Security Blog
Microsoft Security Blog
MongoDB | Blog
MongoDB | Blog
T
The Blog of Author Tim Ferriss
罗磊的独立博客
人人都是产品经理
人人都是产品经理
The Cloudflare Blog
Engineering at Meta
Engineering at Meta
Y
Y Combinator Blog
宝玉的分享
宝玉的分享
Recorded Future
Recorded Future
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
月光博客
月光博客
Recent Announcements
Recent Announcements
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
D
Darknet – Hacking Tools, Hacker News & Cyber Security
Apple Machine Learning Research
Apple Machine Learning Research
T
Threatpost
The GitHub Blog
The GitHub Blog
M
MIT News - Artificial intelligence
Scott Helme
Scott Helme
P
Palo Alto Networks Blog
T
Tenable Blog
P
Privacy International News Feed
V
Visual Studio Blog
F
Fortinet All Blogs
酷 壳 – CoolShell
酷 壳 – CoolShell
I
Intezer
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
AI
AI
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
S
Security Affairs
S
SegmentFault 最新的问题
C
Cisco Blogs
博客园 - 聂微东
MyScale Blog
MyScale Blog
V
Vulnerabilities – Threatpost
量子位
T
The Exploit Database - CXSecurity.com
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Security Latest
Security Latest
P
Proofpoint News Feed
阮一峰的网络日志
阮一峰的网络日志
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
T
Troy Hunt's Blog
T
Tailwind CSS Blog
Stack Overflow Blog
Stack Overflow Blog
云风的 BLOG
云风的 BLOG
A
About on SuperTechFans
The Last Watchdog
The Last Watchdog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
What's a 1% Email Deliverability Improvement Worth to Your Business?
Regő Botond Ronyecz · 2026-05-30 · via DEV Community

The average inbox placement rate across all senders is 83.1%. That means roughly one in six emails never reaches the inbox — delivered by the mail server's definition, invisible by any practical one.

If you are sending 50,000 emails a month with an 83% inbox placement rate, about 8,500 of those emails are going directly to spam or being silently discarded. They were sent. They were not received. You have no idea which ones.

Most businesses treat deliverability as a binary: either emails are arriving or they are not. The more useful framing is economic. Inbox placement is a revenue lever that most teams are leaving in its default position. Moving it by 1% is worth a calculable, specific number of dollars — and for most businesses sending transactional or lifecycle email, that number is larger than the cost of every tool needed to fix it combined.

This post walks through the calculation in concrete terms, shows what inbox placement actually costs across different business models, and identifies the specific DNS and authentication configurations that drive the gap between 83% and 95%+.


The Baseline: What "Delivered" Actually Means

There is a critical distinction in email metrics that most dashboards blur: delivery rate and deliverability rate are not the same number.

Delivery rate measures whether the receiving mail server accepted the message. A 99% delivery rate means 99% of your emails were not bounced. It says nothing about where they went after acceptance.

Deliverability rate (or inbox placement rate) measures whether the accepted message reached the inbox — not the spam folder, not the promotions tab, the inbox.

Your ESP's dashboard shows delivery rate. What actually drives revenue is deliverability rate.

The gap between them is the spam folder. An email that lands in spam was "delivered" by every metric your dashboard tracks. It generated zero opens, zero clicks, and zero revenue. It is indistinguishable, in your reporting, from an email that reached the primary inbox and was simply not opened.

This is why inbox placement problems are so persistent: the data you see doesn't show them.


The Math: Calculating Your Deliverability Revenue Gap

The calculation has four inputs:

  1. Monthly email volume — how many emails you send per month
  2. Current inbox placement rate — what percentage actually reach the inbox (not your delivery rate — your inbox placement rate, which requires seed testing to measure)
  3. Revenue per email sent — total email-attributed revenue divided by emails sent
  4. Target inbox placement rate — realistically 95%+ with proper authentication in place

The formula:

Revenue gap = Monthly volume × (Target rate − Current rate) × Revenue per email

Let's run it for three different business models.


E-commerce: 100,000 emails/month

An online retailer sending 100,000 emails per month — marketing campaigns, abandoned cart sequences, order confirmations, post-purchase flows — at a revenue per email of $0.25 (a conservative figure; many optimized e-commerce programs run $0.40–$0.80).

Scenario Inbox placement Monthly revenue
Current (industry average) 83% $20,750
Target (properly authenticated) 95% $23,750
Difference +12 percentage points +$3,000/month

That is $36,000 per year from closing the inbox placement gap — on a conservative revenue-per-email figure, before any change to subject lines, send times, or creative.

If the retailer is closer to the industry average inbox placement of 83% and their revenue per email is higher — which is typical for businesses with mature lifecycle sequences — the annual gap is larger.


SaaS: Transactional email at 500,000 emails/month

A SaaS company sending 500,000 transactional emails per month — trial onboarding sequences, feature announcements, expiry warnings, payment failure notices. Revenue per email is harder to calculate directly, but the downstream cost of spam placement on transactional email is concrete: a payment failure notice that lands in spam means a churned customer. An onboarding email that goes unread means a user who does not activate.

Transactional emails have 8x higher opens and clicks compared to regular marketing emails. They are also the emails where deliverability failure has the most direct business consequence — a missed invoice or a password reset that never arrives is a support ticket and a frustrated customer.

At this volume, a 1% inbox placement improvement means 5,000 more transactional emails reaching their recipients every month. For a SaaS with a $500 annual contract value and even a 0.1% conversion rate on those recovered emails, that is 5 additional conversions per month — $2,500/month, $30,000/year.


Agency / MSP: Client email reputation management

An agency managing email infrastructure for 20 clients, each sending 10,000 emails per month at an average revenue per email of $0.15. Current average inbox placement across the client portfolio: 80%.

If the agency brings every client from 80% to 95% inbox placement:

20 clients × 10,000 emails × $0.15 × 0.15 improvement = $4,500/month in recovered revenue

That is $4,500 per month in additional revenue attribution across the portfolio — generated by DNS and authentication fixes, not by a single additional piece of content.


What Is Holding Inbox Placement Below 95%

Only approximately 33.4% of top 1M domains publish valid DMARC, and roughly 85.7% don't enforce it. That is the core of the inbox placement problem for most businesses: the authentication signals that inbox providers use to evaluate sender reputation are either missing or misconfigured on the majority of domains.

Gmail and Yahoo introduced mandatory authentication requirements for bulk senders in early 2024: SPF, DKIM, and DMARC are now required for anyone sending to these providers at scale. Senders who do not meet these requirements see increased spam folder placement, regardless of list quality or content.

The specific configurations that drive inbox placement below 95%:

Missing or broken SPF

SPF lists the mail servers authorized to send email from your domain. When a receiving server checks SPF and the sending IP is not on the list, the email fails authentication — and failed authentication is one of the strongest spam signals an inbox provider uses.

The most common SPF failure mode is not a missing record — it is an incomplete one. A company adds SendGrid to their SPF record when they sign up for transactional email, then adds Google Workspace, then Salesforce, and never updates the SPF record. The Salesforce emails fail SPF. They land in spam. The DMARC report shows it but nobody reads the DMARC report.

# Check your current SPF record
dig yourdomain.com TXT +short | grep spf

DKIM not configured for all sending services

DKIM adds a cryptographic signature to every outgoing email. Receiving servers verify the signature against a public key in your DNS. Unsigned email from your domain — email sent by a service you use that does not have DKIM configured — is treated with significantly more suspicion than signed email.

The problem mirrors the SPF issue: DKIM is configured for the primary email provider and missing for secondary senders. Marketing platforms, CRM tools, HR systems, invoicing software — any of these that send email as your domain without DKIM configured contribute to failed authentication across a portion of your sends.

DMARC at p=none — monitoring without enforcement

DMARC ties SPF and DKIM together and tells receiving servers what to do when authentication fails. The policy options are p=none (do nothing), p=quarantine (send to spam), and p=reject (block entirely).

p=none is the configuration most organizations land on and never leave. It generates reports about authentication failures. It takes no action on them. From an inbox provider's perspective, p=none signals a domain that is aware of its authentication status but has chosen not to enforce it.

Since early 2024, Gmail and Yahoo require SPF, DKIM, and DMARC for any sender delivering at bulk volume. But the requirement is for the records to exist — not for the policy to be enforced. p=none satisfies the existence requirement while doing nothing to improve inbox placement. Moving to p=quarantine and eventually p=reject is what drives the authentication signal that inbox providers reward.

Blacklist placement

A sending IP or domain on a major blacklist sees immediate, severe inbox placement degradation. Spamhaus ZEN covers approximately 3 billion mailboxes. A listing there means a large portion of your emails are being rejected at the server level — they never even reach the spam folder.

Blacklist placement happens for reasons unrelated to your content: a compromised account sending spam, a spike in sending volume that looks automated, or a shared IP on an ESP where a neighboring sender triggered a listing. The only way to know your current blacklist status is to check — and the only way to know when status changes is continuous monitoring.

# Check Spamhaus combined zone (SBL + XBL + PBL)
# Reverse your sending IP octets first (e.g. 192.0.2.1 → 1.2.0.192)
dig 1.2.0.192.zen.spamhaus.org A
# NXDOMAIN = clean. Any other response = listed.


The Fix: What Moves Inbox Placement From 83% to 95%+

The inbox placement gap between the industry average and a properly configured sender is almost entirely explained by four authentication controls. None of them require changes to email content, subject lines, sending frequency, or list composition.

1. Complete SPF record — all sending services listed, under 10 DNS lookups, one record per domain (two records breaks SPF for everyone).

2. DKIM for every sender — all services that send email as your domain have a DKIM key configured, minimum 2048-bit key strength. Keys older than 12 months should be rotated.

3. DMARC policy enforcement — move from p=none to p=quarantine. Read the DMARC RUA reports for two to four weeks. When the reports show clean authentication across your legitimate senders, advance to p=reject. This is the single highest-impact change for inbox placement, and it is a DNS record update.

4. Active blacklist monitoring — know your blacklist status before your recipients tell you about it. The window between listing and your team noticing it manually is typically days. Automated monitoring closes that gap to minutes.

These four changes are not creative work. They are configuration. They require DNS access and about two hours to implement correctly. The revenue recovery they enable is proportional to your email volume — for most businesses, that means the tool cost pays for itself inside the first month.


The Revenue Per Email Calculation for Your Business

If you have not calculated your revenue per email, here is the straightforward version:

Revenue per email = (Email-attributed revenue per month) ÷ (Emails sent per month)

Email-attributed revenue is the revenue from purchases that occurred within the attribution window after an email click or open — your ESP should report this directly.

If you do not have this number, use these industry benchmarks as a starting point:

Business type Revenue per email sent (conservative)
E-commerce (promotional) $0.10–$0.40
E-commerce (transactional / cart recovery) $0.40–$1.50
SaaS (lifecycle / onboarding) $0.05–$0.20
SaaS (payment failure / renewal) $0.50–$2.00
Financial services $0.20–$0.80
B2B (lead nurture) $0.30–$1.50

Now apply the deliverability gap:

Annual revenue gap = Monthly volume × (0.95 − Current placement rate) × Revenue per email × 12

If your current inbox placement rate is 83% and your target is 95%, that is a 12-percentage-point gap. On 50,000 emails per month at $0.25 revenue per email:

50,000 × 0.12 × $0.25 × 12 = $18,000/year

That is the revenue sitting between your current inbox placement rate and where it should be — recoverable through authentication fixes, not through more content or bigger lists.

ZeroHook's Email ROI Calculator runs this calculation for your own numbers without requiring an account — enter your volume, current open rate, and average order value to see your specific gap estimate.


TL;DR

  • The average inbox placement rate is 83.1% — meaning roughly 1 in 6 emails never reaches the inbox. Your ESP's delivery rate does not show this
  • A 1% deliverability improvement is worth $3,000–$36,000+ per year depending on email volume and revenue per email — the range is wide but the floor is significant for any business sending at moderate volume
  • The gap between 83% and 95%+ inbox placement is almost entirely explained by four authentication controls: complete SPF, DKIM for all senders, DMARC at p=quarantine or p=reject, and active blacklist monitoring
  • None of these require content changes — they are DNS configuration fixes that take two hours to implement correctly
  • p=none is the configuration most organizations never leave — it satisfies the existence requirement but takes no action on authentication failures. Moving to p=quarantine is the single highest-impact change for inbox placement
  • Calculate your own number: monthly email volume × (0.95 − current placement rate) × revenue per email × 12 = annual revenue gap from the inbox placement shortfall

*Part of an ongoing series on email deliverability and DNS security.