Skip to main content
All Industries

EU Industry Benchmark

Construction

Anonymized security posture data for the construction sector across the EU. Based on 13446 monitored sites.

46.5

Avg. Score /100

D

Avg. Grade

13446

Sites Tracked

+2.0

vs. EU Average

Critical findings in this industry

6762 of 13446 without HTTPS redirect

50.0%

10835 of 13446 with unencrypted email (no STARTTLS)

81.0%

11899 of 13446 without DMARC protection (spoofable)

88.0%

7080 of 13446 missing 3+ critical security headers

53.0%

11693 of 13446 without DNSSEC (vulnerable to DNS spoofing)

87.0%

13179 of 13446 without CAA records (unrestricted certificate issuance)

98.0%

13379 of 13446 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
53 (0.0%)
C
1111 (8.0%)
D
9165 (68.0%)
F
3117 (23.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 42.6/100 (1001 sites) Belgium: 41.0/100 (326 sites) Bulgaria: 40.6/100 (41 sites) Croatia: 39.8/100 (23 sites) Cyprus: 38.5/100 (4 sites) Czech Republic: 40.6/100 (119 sites) Denmark: 42.5/100 (164 sites) Estonia: 44.4/100 (22 sites) Finland: 41.8/100 (171 sites) France: 45.1/100 (1561 sites) Germany: 50.0/100 (6549 sites) Greece: 37.4/100 (29 sites) Hungary: 39.8/100 (32 sites) Ireland: 40.7/100 (79 sites) Italy: 41.1/100 (416 sites) Latvia: 41.7/100 (13 sites) Lithuania: 38.3/100 (15 sites) Luxembourg: 42.9/100 (54 sites) Netherlands: 42.0/100 (390 sites) Norway: 42.7/100 (239 sites) Poland: 38.9/100 (351 sites) Portugal: 39.2/100 (51 sites) Romania: 41.6/100 (34 sites) Slovakia: 41.9/100 (135 sites) Slovenia: 38.5/100 (62 sites) Spain: 40.8/100 (297 sites) Sweden: 41.7/100 (77 sites) Switzerland: 47.0/100 (587 sites) United Kingdom: 45.0/100 (595 sites)
Worse
Better

Score by Country

🇦🇹 Austria
42.6 1001 🇧🇪 Belgium
41.0 326 🇧🇬 Bulgaria
40.6 41 🇭🇷 Croatia
39.8 23 🇨🇾 Cyprus
38.5 4 🇨🇿 Czech Republic
40.6 119 🇩🇰 Denmark
42.5 164 🇪🇪 Estonia
44.4 22 🇫🇮 Finland
41.8 171 🇫🇷 France
45.1 1561 🇩🇪 Germany
50.0 6549 🇬🇷 Greece
37.4 29 🇭🇺 Hungary
39.8 32 🇮🇸 Iceland
39.3 3 🇮🇪 Ireland
40.7 79 🇮🇹 Italy
41.1 416 🇱🇻 Latvia
41.7 13 🇱🇹 Lithuania
38.3 15 🇱🇺 Luxembourg
42.9 54 🇲🇹 Malta
40.0 6 🇳🇱 Netherlands
42.0 390 🇳🇴 Norway
42.7 239 🇵🇱 Poland
38.9 351 🇵🇹 Portugal
39.2 51 🇷🇴 Romania
41.6 34 🇸🇰 Slovakia
41.9 135 🇸🇮 Slovenia
38.5 62 🇪🇸 Spain
40.8 297 🇸🇪 Sweden
41.7 77 🇨🇭 Switzerland
47.0 587 🇬🇧 United Kingdom
45.0 595

Hosting & Data Residency

71%

EU-headquartered provider

29%

Non-EU provider (CLOUD Act / Schrems II)

IONOS (1&1) (DE) 1761 24.4%
Hetzner (DE) 1021 14.1%
Strato (DE) 901 12.5%
OVHcloud (FR) 841 11.6%
Cloudflare (US) 732 10.1%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.