Skip to main content
All Industries

EU Industry Benchmark

Construction

Anonymized security posture data for the construction sector across the EU. Based on 13384 monitored sites.

38.9

Avg. Score /100

F

Avg. Grade

13384

Sites Tracked

0.0

vs. EU Average

Critical findings in this industry

12124 of 13384 without HTTPS redirect

91.0%

13070 of 13384 with unencrypted email (no STARTTLS)

98.0%

13356 of 13384 without DMARC protection (spoofable)

100.0%

3020 of 13384 missing 3+ critical security headers

23.0%

11665 of 13384 without DNSSEC (vulnerable to DNS spoofing)

87.0%

13119 of 13384 without CAA records (unrestricted certificate issuance)

98.0%

13319 of 13384 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
0 (0.0%)
C
107 (1.0%)
D
6360 (48.0%)
F
6917 (52.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.1/100 (995 sites) Belgium: 42.5/100 (326 sites) Bulgaria: 39.3/100 (41 sites) Croatia: 42.0/100 (23 sites) Cyprus: 34.8/100 (4 sites) Czech Republic: 42.7/100 (118 sites) Denmark: 40.9/100 (164 sites) Estonia: 41.6/100 (22 sites) Finland: 39.8/100 (169 sites) France: 36.8/100 (1557 sites) Germany: 38.1/100 (6512 sites) Greece: 41.0/100 (29 sites) Hungary: 39.2/100 (32 sites) Ireland: 42.1/100 (80 sites) Italy: 37.5/100 (416 sites) Latvia: 39.8/100 (12 sites) Lithuania: 40.0/100 (15 sites) Luxembourg: 39.9/100 (54 sites) Netherlands: 40.2/100 (388 sites) Norway: 40.2/100 (239 sites) Poland: 37.4/100 (351 sites) Portugal: 41.3/100 (51 sites) Romania: 38.3/100 (33 sites) Slovakia: 40.8/100 (135 sites) Slovenia: 37.0/100 (61 sites) Spain: 38.7/100 (293 sites) Sweden: 40.0/100 (77 sites) Switzerland: 46.6/100 (586 sites) United Kingdom: 37.6/100 (592 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.1 995 🇧🇪 Belgium
42.5 326 🇧🇬 Bulgaria
39.3 41 🇭🇷 Croatia
42.0 23 🇨🇾 Cyprus
34.8 4 🇨🇿 Czech Republic
42.7 118 🇩🇰 Denmark
40.9 164 🇪🇪 Estonia
41.6 22 🇫🇮 Finland
39.8 169 🇫🇷 France
36.8 1557 🇩🇪 Germany
38.1 6512 🇬🇷 Greece
41.0 29 🇭🇺 Hungary
39.2 32 🇮🇸 Iceland
45.7 3 🇮🇪 Ireland
42.1 80 🇮🇹 Italy
37.5 416 🇱🇻 Latvia
39.8 12 🇱🇹 Lithuania
40.0 15 🇱🇺 Luxembourg
39.9 54 🇲🇹 Malta
38.2 6 🇳🇱 Netherlands
40.2 388 🇳🇴 Norway
40.2 239 🇵🇱 Poland
37.4 351 🇵🇹 Portugal
41.3 51 🇷🇴 Romania
38.3 33 🇸🇰 Slovakia
40.8 135 🇸🇮 Slovenia
37.0 61 🇪🇸 Spain
38.7 293 🇸🇪 Sweden
40.0 77 🇨🇭 Switzerland
46.6 586 🇬🇧 United Kingdom
37.6 592

Hosting & Data Residency

72%

EU-headquartered provider

28%

Non-EU provider (CLOUD Act / Schrems II)

IONOS (1&1) (DE) 1759 24.4%
Hetzner (DE) 1022 14.2%
Strato (DE) 897 12.4%
OVHcloud (FR) 840 11.7%
Cloudflare (US) 717 9.9%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.