Skip to main content
All Industries

EU Industry Benchmark

Adult

Anonymized security posture data for the adult sector across the EU. Based on 332 monitored sites.

47.3

Avg. Score /100

D

Avg. Grade

332

Sites Tracked

+3.0

vs. EU Average

Critical findings in this industry

238 of 332 without HTTPS redirect

72.0%

200 of 332 with unencrypted email (no STARTTLS)

60.0%

243 of 332 without DMARC protection (spoofable)

73.0%

85 of 332 missing 3+ critical security headers

26.0%

275 of 332 without DNSSEC (vulnerable to DNS spoofing)

83.0%

299 of 332 without CAA records (unrestricted certificate issuance)

90.0%

327 of 332 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
0 (0.0%)
B
3 (1.0%)
C
38 (11.0%)
D
222 (67.0%)
F
69 (21.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 44.4/100 (9 sites) Belgium: 47.4/100 (8 sites) Bulgaria: 41.7/100 (3 sites) Croatia: 48.8/100 (6 sites) Cyprus: 47.5/100 (8 sites) Czech Republic: 46.6/100 (28 sites) Denmark: 48.2/100 (9 sites) Estonia: 44.4/100 (15 sites) Finland: 46.5/100 (11 sites) France: 44.5/100 (22 sites) Germany: 51.4/100 (27 sites) Greece: 46.8/100 (11 sites) Hungary: 46.8/100 (14 sites) Ireland: 43.8/100 (6 sites) Italy: 46.3/100 (15 sites) Latvia: 38.0/100 (6 sites) Lithuania: 49.6/100 (5 sites) Luxembourg: 46.8/100 (12 sites) Netherlands: 50.9/100 (22 sites) Norway: 55.6/100 (9 sites) Poland: 45.6/100 (16 sites) Portugal: 45.8/100 (5 sites) Romania: 43.6/100 (8 sites) Slovakia: 52.0/100 (5 sites) Slovenia: 47.3/100 (7 sites) Spain: 43.4/100 (14 sites) Sweden: 55.2/100 (10 sites) Switzerland: 47.9/100 (8 sites) United Kingdom: 50.3/100 (6 sites)
Worse
Better

Score by Country

🇦🇹 Austria
44.4 9 🇧🇪 Belgium
47.4 8 🇧🇬 Bulgaria
41.7 3 🇭🇷 Croatia
48.8 6 🇨🇾 Cyprus
47.5 8 🇨🇿 Czech Republic
46.6 28 🇩🇰 Denmark
48.2 9 🇪🇪 Estonia
44.4 15 🇫🇮 Finland
46.5 11 🇫🇷 France
44.5 22 🇩🇪 Germany
51.4 27 🇬🇷 Greece
46.8 11 🇭🇺 Hungary
46.8 14 🇮🇸 Iceland
40.8 4 🇮🇪 Ireland
43.8 6 🇮🇹 Italy
46.3 15 🇱🇻 Latvia
38.0 6 🇱🇮 Liechtenstein
53.7 3 🇱🇹 Lithuania
49.6 5 🇱🇺 Luxembourg
46.8 12 🇳🇱 Netherlands
50.9 22 🇳🇴 Norway
55.6 9 🇵🇱 Poland
45.6 16 🇵🇹 Portugal
45.8 5 🇷🇴 Romania
43.6 8 🇸🇰 Slovakia
52.0 5 🇸🇮 Slovenia
47.3 7 🇪🇸 Spain
43.4 14 🇸🇪 Sweden
55.2 10 🇨🇭 Switzerland
47.9 8 🇬🇧 United Kingdom
50.3 6

Hosting & Data Residency

28%

EU-headquartered provider

72%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 122 61.3%
Hetzner (DE) 18 9.0%
Amazon Web Services (US) 18 9.0%
OVHcloud (FR) 9 4.5%
Google Cloud (US) 9 4.5%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.