Skip to main content
All Industries

EU Industry Benchmark

Construction

Anonymized security posture data for the construction sector across the EU. Based on 13399 monitored sites.

39.5

Avg. Score /100

F

Avg. Grade

13399

Sites Tracked

-0.0

vs. EU Average

Critical findings in this industry

10822 of 13399 without HTTPS redirect

81.0%

13027 of 13399 with unencrypted email (no STARTTLS)

97.0%

13367 of 13399 without DMARC protection (spoofable)

100.0%

3278 of 13399 missing 3+ critical security headers

24.0%

11668 of 13399 without DNSSEC (vulnerable to DNS spoofing)

87.0%

13133 of 13399 without CAA records (unrestricted certificate issuance)

98.0%

13334 of 13399 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
0 (0.0%)
C
148 (1.0%)
D
6653 (50.0%)
F
6598 (49.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.6/100 (997 sites) Belgium: 40.6/100 (325 sites) Bulgaria: 41.1/100 (41 sites) Croatia: 42.0/100 (23 sites) Cyprus: 37.8/100 (4 sites) Czech Republic: 42.5/100 (119 sites) Denmark: 41.5/100 (163 sites) Estonia: 46.0/100 (22 sites) Finland: 40.3/100 (169 sites) France: 37.6/100 (1557 sites) Germany: 39.1/100 (6524 sites) Greece: 38.6/100 (29 sites) Hungary: 38.7/100 (32 sites) Ireland: 41.3/100 (80 sites) Italy: 38.4/100 (416 sites) Latvia: 42.2/100 (12 sites) Lithuania: 42.1/100 (15 sites) Luxembourg: 45.3/100 (54 sites) Netherlands: 41.4/100 (388 sites) Norway: 40.2/100 (239 sites) Poland: 38.9/100 (351 sites) Portugal: 39.5/100 (51 sites) Romania: 39.8/100 (33 sites) Slovakia: 43.4/100 (135 sites) Slovenia: 40.5/100 (62 sites) Spain: 39.3/100 (294 sites) Sweden: 41.8/100 (77 sites) Switzerland: 43.4/100 (586 sites) United Kingdom: 38.2/100 (592 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.6 997 🇧🇪 Belgium
40.6 325 🇧🇬 Bulgaria
41.1 41 🇭🇷 Croatia
42.0 23 🇨🇾 Cyprus
37.8 4 🇨🇿 Czech Republic
42.5 119 🇩🇰 Denmark
41.5 163 🇪🇪 Estonia
46.0 22 🇫🇮 Finland
40.3 169 🇫🇷 France
37.6 1557 🇩🇪 Germany
39.1 6524 🇬🇷 Greece
38.6 29 🇭🇺 Hungary
38.7 32 🇮🇸 Iceland
45.3 3 🇮🇪 Ireland
41.3 80 🇮🇹 Italy
38.4 416 🇱🇻 Latvia
42.2 12 🇱🇹 Lithuania
42.1 15 🇱🇺 Luxembourg
45.3 54 🇲🇹 Malta
41.2 6 🇳🇱 Netherlands
41.4 388 🇳🇴 Norway
40.2 239 🇵🇱 Poland
38.9 351 🇵🇹 Portugal
39.5 51 🇷🇴 Romania
39.8 33 🇸🇰 Slovakia
43.4 135 🇸🇮 Slovenia
40.5 62 🇪🇸 Spain
39.3 294 🇸🇪 Sweden
41.8 77 🇨🇭 Switzerland
43.4 586 🇬🇧 United Kingdom
38.2 592

Hosting & Data Residency

72%

EU-headquartered provider

28%

Non-EU provider (CLOUD Act / Schrems II)

IONOS (1&1) (DE) 1760 24.4%
Hetzner (DE) 1023 14.2%
Strato (DE) 900 12.5%
OVHcloud (FR) 840 11.6%
Cloudflare (US) 721 10.0%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.