Skip to main content
All Industries

EU Industry Benchmark

Adult

Anonymized security posture data for the adult sector across the EU. Based on 331 monitored sites.

41.5

Avg. Score /100

D

Avg. Grade

331

Sites Tracked

+2.0

vs. EU Average

Critical findings in this industry

190 of 331 without HTTPS redirect

57.0%

326 of 331 with unencrypted email (no STARTTLS)

98.0%

331 of 331 without DMARC protection (spoofable)

100.0%

121 of 331 missing 3+ critical security headers

37.0%

277 of 331 without DNSSEC (vulnerable to DNS spoofing)

84.0%

297 of 331 without CAA records (unrestricted certificate issuance)

90.0%

326 of 331 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
0 (0.0%)
B
0 (0.0%)
C
14 (4.0%)
D
160 (48.0%)
F
157 (47.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.8/100 (9 sites) Belgium: 43.6/100 (8 sites) Bulgaria: 44.7/100 (3 sites) Croatia: 41.7/100 (6 sites) Cyprus: 40.8/100 (8 sites) Czech Republic: 42.4/100 (28 sites) Denmark: 44.2/100 (9 sites) Estonia: 39.5/100 (15 sites) Finland: 41.1/100 (12 sites) France: 39.5/100 (21 sites) Germany: 40.1/100 (27 sites) Greece: 41.0/100 (11 sites) Hungary: 44.5/100 (14 sites) Ireland: 42.3/100 (6 sites) Italy: 42.6/100 (14 sites) Latvia: 36.0/100 (6 sites) Lithuania: 39.2/100 (5 sites) Luxembourg: 39.5/100 (12 sites) Netherlands: 43.7/100 (22 sites) Norway: 43.8/100 (9 sites) Poland: 40.4/100 (16 sites) Portugal: 44.2/100 (5 sites) Romania: 37.5/100 (8 sites) Slovakia: 43.6/100 (5 sites) Slovenia: 37.4/100 (7 sites) Spain: 39.3/100 (14 sites) Sweden: 47.9/100 (10 sites) Switzerland: 42.0/100 (8 sites) United Kingdom: 39.8/100 (6 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.8 9 🇧🇪 Belgium
43.6 8 🇧🇬 Bulgaria
44.7 3 🇭🇷 Croatia
41.7 6 🇨🇾 Cyprus
40.8 8 🇨🇿 Czech Republic
42.4 28 🇩🇰 Denmark
44.2 9 🇪🇪 Estonia
39.5 15 🇫🇮 Finland
41.1 12 🇫🇷 France
39.5 21 🇩🇪 Germany
40.1 27 🇬🇷 Greece
41.0 11 🇭🇺 Hungary
44.5 14 🇮🇸 Iceland
41.0 4 🇮🇪 Ireland
42.3 6 🇮🇹 Italy
42.6 14 🇱🇻 Latvia
36.0 6 🇱🇮 Liechtenstein
43.3 3 🇱🇹 Lithuania
39.2 5 🇱🇺 Luxembourg
39.5 12 🇳🇱 Netherlands
43.7 22 🇳🇴 Norway
43.8 9 🇵🇱 Poland
40.4 16 🇵🇹 Portugal
44.2 5 🇷🇴 Romania
37.5 8 🇸🇰 Slovakia
43.6 5 🇸🇮 Slovenia
37.4 7 🇪🇸 Spain
39.3 14 🇸🇪 Sweden
47.9 10 🇨🇭 Switzerland
42.0 8 🇬🇧 United Kingdom
39.8 6

Hosting & Data Residency

28%

EU-headquartered provider

72%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 122 61.3%
Amazon Web Services (US) 18 9.0%
Hetzner (DE) 18 9.0%
Google Cloud (US) 9 4.5%
OVHcloud (FR) 9 4.5%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.