Skip to main content
All Industries

EU Industry Benchmark

Beauty

Anonymized security posture data for the beauty sector across the EU. Based on 30220 monitored sites.

39.4

Avg. Score /100

F

Avg. Grade

30220

Sites Tracked

0.0

vs. EU Average

Critical findings in this industry

27237 of 30220 without HTTPS redirect

90.0%

29819 of 30220 with unencrypted email (no STARTTLS)

99.0%

30177 of 30220 without DMARC protection (spoofable)

100.0%

7495 of 30220 missing 3+ critical security headers

25.0%

24839 of 30220 without DNSSEC (vulnerable to DNS spoofing)

82.0%

29640 of 30220 without CAA records (unrestricted certificate issuance)

98.0%

30177 of 30220 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
0 (0.0%)
C
207 (1.0%)
D
15296 (51.0%)
F
14717 (49.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.2/100 (932 sites) Belgium: 43.5/100 (938 sites) Bulgaria: 38.6/100 (101 sites) Croatia: 39.5/100 (72 sites) Cyprus: 40.6/100 (26 sites) Czech Republic: 42.7/100 (487 sites) Denmark: 40.7/100 (495 sites) Estonia: 41.0/100 (132 sites) Finland: 40.1/100 (909 sites) France: 37.0/100 (3137 sites) Germany: 38.3/100 (9232 sites) Greece: 42.5/100 (142 sites) Hungary: 39.8/100 (180 sites) Ireland: 43.7/100 (382 sites) Italy: 37.4/100 (873 sites) Latvia: 39.4/100 (74 sites) Lithuania: 39.4/100 (106 sites) Luxembourg: 40.0/100 (58 sites) Netherlands: 40.9/100 (3238 sites) Norway: 41.0/100 (283 sites) Poland: 37.2/100 (1046 sites) Portugal: 42.5/100 (134 sites) Romania: 40.7/100 (160 sites) Slovakia: 42.1/100 (398 sites) Slovenia: 37.5/100 (67 sites) Spain: 39.0/100 (673 sites) Sweden: 40.9/100 (404 sites) Switzerland: 45.3/100 (1562 sites) United Kingdom: 37.9/100 (3951 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.2 932 🇧🇪 Belgium
43.5 938 🇧🇬 Bulgaria
38.6 101 🇭🇷 Croatia
39.5 72 🇨🇾 Cyprus
40.6 26 🇨🇿 Czech Republic
42.7 487 🇩🇰 Denmark
40.7 495 🇪🇪 Estonia
41.0 132 🇫🇮 Finland
40.1 909 🇫🇷 France
37.0 3137 🇩🇪 Germany
38.3 9232 🇬🇷 Greece
42.5 142 🇭🇺 Hungary
39.8 180 🇮🇸 Iceland
42.9 14 🇮🇪 Ireland
43.7 382 🇮🇹 Italy
37.4 873 🇱🇻 Latvia
39.4 74 🇱🇮 Liechtenstein
44.2 4 🇱🇹 Lithuania
39.4 106 🇱🇺 Luxembourg
40.0 58 🇲🇹 Malta
39.3 10 🇳🇱 Netherlands
40.9 3238 🇳🇴 Norway
41.0 283 🇵🇱 Poland
37.2 1046 🇵🇹 Portugal
42.5 134 🇷🇴 Romania
40.7 160 🇸🇰 Slovakia
42.1 398 🇸🇮 Slovenia
37.5 67 🇪🇸 Spain
39.0 673 🇸🇪 Sweden
40.9 404 🇨🇭 Switzerland
45.3 1562 🇬🇧 United Kingdom
37.9 3951

Hosting & Data Residency

49%

EU-headquartered provider

51%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 3416 19.4%
IONOS (1&1) (DE) 2639 15.0%
Amazon Web Services (US) 2088 11.8%
Wix (IL) 2050 11.6%
Google Cloud (US) 1902 10.8%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.