Skip to main content
All Industries

EU Industry Benchmark

Adult

Anonymized security posture data for the adult sector across the EU. Based on 331 monitored sites.

38.5

Avg. Score /100

F

Avg. Grade

331

Sites Tracked

-0.0

vs. EU Average

Critical findings in this industry

324 of 331 without HTTPS redirect

98.0%

327 of 331 with unencrypted email (no STARTTLS)

99.0%

331 of 331 without DMARC protection (spoofable)

100.0%

43 of 331 missing 3+ critical security headers

13.0%

277 of 331 without DNSSEC (vulnerable to DNS spoofing)

84.0%

296 of 331 without CAA records (unrestricted certificate issuance)

89.0%

326 of 331 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
0 (0.0%)
B
0 (0.0%)
C
4 (1.0%)
D
122 (37.0%)
F
205 (62.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.2/100 (8 sites) Belgium: 39.2/100 (8 sites) Bulgaria: 36.7/100 (3 sites) Croatia: 42.3/100 (6 sites) Cyprus: 39.9/100 (8 sites) Czech Republic: 36.6/100 (28 sites) Denmark: 40.1/100 (9 sites) Estonia: 37.3/100 (15 sites) Finland: 38.7/100 (12 sites) France: 37.6/100 (21 sites) Germany: 37.9/100 (27 sites) Greece: 38.3/100 (11 sites) Hungary: 38.9/100 (14 sites) Ireland: 38.0/100 (6 sites) Italy: 37.5/100 (14 sites) Latvia: 33.8/100 (6 sites) Lithuania: 35.4/100 (5 sites) Luxembourg: 34.8/100 (12 sites) Netherlands: 40.0/100 (22 sites) Norway: 39.6/100 (9 sites) Poland: 40.7/100 (16 sites) Portugal: 39.6/100 (5 sites) Romania: 34.8/100 (8 sites) Slovakia: 40.6/100 (5 sites) Slovenia: 35.4/100 (7 sites) Spain: 36.5/100 (14 sites) Sweden: 43.6/100 (10 sites) Switzerland: 39.4/100 (8 sites) United Kingdom: 42.3/100 (6 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.2 8 🇧🇪 Belgium
39.2 8 🇧🇬 Bulgaria
36.7 3 🇭🇷 Croatia
42.3 6 🇨🇾 Cyprus
39.9 8 🇨🇿 Czech Republic
36.6 28 🇩🇰 Denmark
40.1 9 🇪🇪 Estonia
37.3 15 🇫🇮 Finland
38.7 12 🇫🇷 France
37.6 21 🇩🇪 Germany
37.9 27 🇬🇷 Greece
38.3 11 🇭🇺 Hungary
38.9 14 🇮🇸 Iceland
45.6 5 🇮🇪 Ireland
38.0 6 🇮🇹 Italy
37.5 14 🇱🇻 Latvia
33.8 6 🇱🇮 Liechtenstein
42.3 3 🇱🇹 Lithuania
35.4 5 🇱🇺 Luxembourg
34.8 12 🇳🇱 Netherlands
40.0 22 🇳🇴 Norway
39.6 9 🇵🇱 Poland
40.7 16 🇵🇹 Portugal
39.6 5 🇷🇴 Romania
34.8 8 🇸🇰 Slovakia
40.6 5 🇸🇮 Slovenia
35.4 7 🇪🇸 Spain
36.5 14 🇸🇪 Sweden
43.6 10 🇨🇭 Switzerland
39.4 8 🇬🇧 United Kingdom
42.3 6

Hosting & Data Residency

28%

EU-headquartered provider

72%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 121 61.1%
Hetzner (DE) 18 9.1%
Amazon Web Services (US) 18 9.1%
Google Cloud (US) 9 4.5%
OVHcloud (FR) 9 4.5%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.