Skip to main content
All Industries

EU Industry Benchmark

Automotive

Anonymized security posture data for the automotive sector across the EU. Based on 36181 monitored sites.

43.6

Avg. Score /100

D

Avg. Grade

36181

Sites Tracked

-0.0

vs. EU Average

Critical findings in this industry

25786 of 36181 without HTTPS redirect

71.0%

29360 of 36181 with unencrypted email (no STARTTLS)

81.0%

32714 of 36181 without DMARC protection (spoofable)

90.0%

10836 of 36181 missing 3+ critical security headers

30.0%

30666 of 36181 without DNSSEC (vulnerable to DNS spoofing)

85.0%

35309 of 36181 without CAA records (unrestricted certificate issuance)

98.0%

36068 of 36181 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
111 (0.0%)
C
1783 (5.0%)
D
21685 (60.0%)
F
12602 (35.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.7/100 (1438 sites) Belgium: 40.8/100 (970 sites) Bulgaria: 39.2/100 (231 sites) Croatia: 40.9/100 (184 sites) Cyprus: 40.3/100 (66 sites) Czech Republic: 40.9/100 (672 sites) Denmark: 41.2/100 (483 sites) Estonia: 43.4/100 (240 sites) Finland: 41.6/100 (653 sites) France: 42.2/100 (3399 sites) Germany: 48.1/100 (11654 sites) Greece: 40.1/100 (347 sites) Hungary: 38.7/100 (412 sites) Ireland: 39.1/100 (455 sites) Italy: 40.0/100 (1862 sites) Latvia: 43.0/100 (146 sites) Lithuania: 40.4/100 (243 sites) Luxembourg: 44.6/100 (63 sites) Netherlands: 41.3/100 (2604 sites) Norway: 42.4/100 (427 sites) Poland: 38.6/100 (2348 sites) Portugal: 41.1/100 (366 sites) Romania: 39.5/100 (358 sites) Slovakia: 40.5/100 (632 sites) Slovenia: 40.2/100 (186 sites) Spain: 39.7/100 (1080 sites) Sweden: 42.2/100 (424 sites) Switzerland: 43.4/100 (1173 sites) United Kingdom: 45.5/100 (2964 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.7 1438 🇧🇪 Belgium
40.8 970 🇧🇬 Bulgaria
39.2 231 🇭🇷 Croatia
40.9 184 🇨🇾 Cyprus
40.3 66 🇨🇿 Czech Republic
40.9 672 🇩🇰 Denmark
41.2 483 🇪🇪 Estonia
43.4 240 🇪🇺 European Union
49.0 7 🇫🇮 Finland
41.6 653 🇫🇷 France
42.2 3399 🇩🇪 Germany
48.1 11654 🇬🇷 Greece
40.1 347 🇭🇺 Hungary
38.7 412 🇮🇸 Iceland
43.4 67 🇮🇪 Ireland
39.1 455 🇮🇹 Italy
40.0 1862 🇱🇻 Latvia
43.0 146 🇱🇮 Liechtenstein
50.1 9 🇱🇹 Lithuania
40.4 243 🇱🇺 Luxembourg
44.6 63 🇲🇹 Malta
42.2 18 🇳🇱 Netherlands
41.3 2604 🇳🇴 Norway
42.4 427 🇵🇱 Poland
38.6 2348 🇵🇹 Portugal
41.1 366 🇷🇴 Romania
39.5 358 🇸🇰 Slovakia
40.5 632 🇸🇮 Slovenia
40.2 186 🇪🇸 Spain
39.7 1080 🇸🇪 Sweden
42.2 424 🇨🇭 Switzerland
43.4 1173 🇬🇧 United Kingdom
45.5 2964

Hosting & Data Residency

57%

EU-headquartered provider

43%

Non-EU provider (CLOUD Act / Schrems II)

Amazon Web Services (US) 3536 19.3%
Cloudflare (US) 3232 17.6%
IONOS (1&1) (DE) 2976 16.2%
Hetzner (DE) 2516 13.7%
OVHcloud (FR) 1769 9.6%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.