Skip to main content
All Industries

EU Industry Benchmark

Beauty

Anonymized security posture data for the beauty sector across the EU. Based on 30039 monitored sites.

43.0

Avg. Score /100

D

Avg. Grade

30039

Sites Tracked

0.0

vs. EU Average

Critical findings in this industry

15998 of 30039 without HTTPS redirect

53.0%

28182 of 30039 with unencrypted email (no STARTTLS)

94.0%

29711 of 30039 without DMARC protection (spoofable)

99.0%

18354 of 30039 missing 3+ critical security headers

61.0%

24647 of 30039 without DNSSEC (vulnerable to DNS spoofing)

82.0%

29450 of 30039 without CAA records (unrestricted certificate issuance)

98.0%

30000 of 30039 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
4 (0.0%)
C
911 (3.0%)
D
19667 (65.0%)
F
9457 (31.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 42.4/100 (930 sites) Belgium: 43.4/100 (936 sites) Bulgaria: 41.4/100 (100 sites) Croatia: 42.0/100 (72 sites) Cyprus: 44.0/100 (26 sites) Czech Republic: 42.8/100 (486 sites) Denmark: 43.8/100 (494 sites) Estonia: 43.7/100 (131 sites) Finland: 43.1/100 (906 sites) France: 41.0/100 (3124 sites) Germany: 42.9/100 (9193 sites) Greece: 41.8/100 (142 sites) Hungary: 41.7/100 (179 sites) Ireland: 44.5/100 (381 sites) Italy: 41.7/100 (867 sites) Latvia: 44.4/100 (74 sites) Lithuania: 42.6/100 (103 sites) Luxembourg: 44.6/100 (57 sites) Netherlands: 45.5/100 (3218 sites) Norway: 45.0/100 (284 sites) Poland: 40.5/100 (1040 sites) Portugal: 42.3/100 (133 sites) Romania: 43.4/100 (159 sites) Slovakia: 44.1/100 (396 sites) Slovenia: 41.8/100 (67 sites) Spain: 42.9/100 (669 sites) Sweden: 44.0/100 (403 sites) Switzerland: 45.3/100 (1560 sites) United Kingdom: 42.7/100 (3881 sites)
Worse
Better

Score by Country

🇦🇹 Austria
42.4 930 🇧🇪 Belgium
43.4 936 🇧🇬 Bulgaria
41.4 100 🇭🇷 Croatia
42.0 72 🇨🇾 Cyprus
44.0 26 🇨🇿 Czech Republic
42.8 486 🇩🇰 Denmark
43.8 494 🇪🇪 Estonia
43.7 131 🇫🇮 Finland
43.1 906 🇫🇷 France
41.0 3124 🇩🇪 Germany
42.9 9193 🇬🇷 Greece
41.8 142 🇭🇺 Hungary
41.7 179 🇮🇸 Iceland
47.8 14 🇮🇪 Ireland
44.5 381 🇮🇹 Italy
41.7 867 🇱🇻 Latvia
44.4 74 🇱🇮 Liechtenstein
47.5 4 🇱🇹 Lithuania
42.6 103 🇱🇺 Luxembourg
44.6 57 🇲🇹 Malta
45.6 10 🇳🇱 Netherlands
45.5 3218 🇳🇴 Norway
45.0 284 🇵🇱 Poland
40.5 1040 🇵🇹 Portugal
42.3 133 🇷🇴 Romania
43.4 159 🇸🇰 Slovakia
44.1 396 🇸🇮 Slovenia
41.8 67 🇪🇸 Spain
42.9 669 🇸🇪 Sweden
44.0 403 🇨🇭 Switzerland
45.3 1560 🇬🇧 United Kingdom
42.7 3881

Hosting & Data Residency

49%

EU-headquartered provider

51%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 3372 19.2%
IONOS (1&1) (DE) 2636 15.0%
Amazon Web Services (US) 2084 11.9%
Wix (IL) 2049 11.7%
Google Cloud (US) 1903 10.8%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.