EU Industry Benchmark
Energy
Anonymized security posture data for the energy sector across the EU. Based on 1782 monitored sites.
42.9
Avg. Score /100
D
Avg. Grade
1782
Sites Tracked
+3.0
vs. EU Average
Critical findings in this industry
1136 of 1782 without HTTPS redirect
1737 of 1782 with unencrypted email (no STARTTLS)
1778 of 1782 without DMARC protection (spoofable)
505 of 1782 missing 3+ critical security headers
1442 of 1782 without DNSSEC (vulnerable to DNS spoofing)
1672 of 1782 without CAA records (unrestricted certificate issuance)
1725 of 1782 without MTA-STS (email downgrade attacks possible)
Grade Distribution
Security across Europe
Average security score by country — hover for details, click to explore.
/100 · sites
Score by Country
Hosting & Data Residency
47%
EU-headquartered provider
53%
Non-EU provider (CLOUD Act / Schrems II)
Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49
All data is anonymized. No individual sites are identified. Statistics updated weekly.