Skip to main content
All Industries

EU Industry Benchmark

Automotive

Anonymized security posture data for the automotive sector across the EU. Based on 35939 monitored sites.

39.8

Avg. Score /100

F

Avg. Grade

35939

Sites Tracked

-1.0

vs. EU Average

Critical findings in this industry

29228 of 35939 without HTTPS redirect

81.0%

35260 of 35939 with unencrypted email (no STARTTLS)

98.0%

35874 of 35939 without DMARC protection (spoofable)

100.0%

15140 of 35939 missing 3+ critical security headers

42.0%

30578 of 35939 without DNSSEC (vulnerable to DNS spoofing)

85.0%

35085 of 35939 without CAA records (unrestricted certificate issuance)

98.0%

35840 of 35939 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
0 (0.0%)
C
752 (2.0%)
D
17269 (48.0%)
F
17918 (50.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.5/100 (1424 sites) Belgium: 42.5/100 (964 sites) Bulgaria: 38.6/100 (232 sites) Croatia: 38.5/100 (185 sites) Cyprus: 38.6/100 (66 sites) Czech Republic: 40.5/100 (655 sites) Denmark: 42.3/100 (482 sites) Estonia: 40.5/100 (242 sites) Finland: 43.3/100 (652 sites) France: 38.1/100 (3398 sites) Germany: 39.2/100 (11585 sites) Greece: 40.3/100 (347 sites) Hungary: 37.5/100 (409 sites) Ireland: 41.8/100 (453 sites) Italy: 38.1/100 (1849 sites) Latvia: 39.9/100 (144 sites) Lithuania: 37.8/100 (241 sites) Luxembourg: 38.6/100 (64 sites) Netherlands: 41.5/100 (2573 sites) Norway: 44.0/100 (429 sites) Poland: 38.9/100 (2338 sites) Portugal: 41.3/100 (366 sites) Romania: 38.4/100 (359 sites) Slovakia: 39.1/100 (625 sites) Slovenia: 37.4/100 (185 sites) Spain: 39.6/100 (1060 sites) Sweden: 42.8/100 (422 sites) Switzerland: 45.3/100 (1166 sites) United Kingdom: 38.5/100 (2923 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.5 1424 🇧🇪 Belgium
42.5 964 🇧🇬 Bulgaria
38.6 232 🇭🇷 Croatia
38.5 185 🇨🇾 Cyprus
38.6 66 🇨🇿 Czech Republic
40.5 655 🇩🇰 Denmark
42.3 482 🇪🇪 Estonia
40.5 242 🇪🇺 European Union
43.6 7 🇫🇮 Finland
43.3 652 🇫🇷 France
38.1 3398 🇩🇪 Germany
39.2 11585 🇬🇷 Greece
40.3 347 🇭🇺 Hungary
37.5 409 🇮🇸 Iceland
39.3 67 🇮🇪 Ireland
41.8 453 🇮🇹 Italy
38.1 1849 🇱🇻 Latvia
39.9 144 🇱🇮 Liechtenstein
41.1 9 🇱🇹 Lithuania
37.8 241 🇱🇺 Luxembourg
38.6 64 🇲🇹 Malta
39.1 18 🇳🇱 Netherlands
41.5 2573 🇳🇴 Norway
44.0 429 🇵🇱 Poland
38.9 2338 🇵🇹 Portugal
41.3 366 🇷🇴 Romania
38.4 359 🇸🇰 Slovakia
39.1 625 🇸🇮 Slovenia
37.4 185 🇪🇸 Spain
39.6 1060 🇸🇪 Sweden
42.8 422 🇨🇭 Switzerland
45.3 1166 🇬🇧 United Kingdom
38.5 2923

Hosting & Data Residency

57%

EU-headquartered provider

43%

Non-EU provider (CLOUD Act / Schrems II)

Amazon Web Services (US) 3501 19.2%
Cloudflare (US) 3114 17.1%
IONOS (1&1) (DE) 2984 16.4%
Hetzner (DE) 2520 13.8%
OVHcloud (FR) 1768 9.7%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.