Skip to main content
All Industries

EU Industry Benchmark

Energy

Anonymized security posture data for the energy sector across the EU. Based on 1779 monitored sites.

44.4

Avg. Score /100

D

Avg. Grade

1779

Sites Tracked

+5.0

vs. EU Average

Critical findings in this industry

1008 of 1779 without HTTPS redirect

57.0%

1734 of 1779 with unencrypted email (no STARTTLS)

97.0%

1775 of 1779 without DMARC protection (spoofable)

100.0%

607 of 1779 missing 3+ critical security headers

34.0%

1437 of 1779 without DNSSEC (vulnerable to DNS spoofing)

81.0%

1669 of 1779 without CAA records (unrestricted certificate issuance)

94.0%

1721 of 1779 without MTA-STS (email downgrade attacks possible)

97.0%

Grade Distribution

A
0 (0.0%)
B
6 (0.0%)
C
181 (10.0%)
D
983 (55.0%)
F
609 (34.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 45.8/100 (54 sites) Belgium: 46.7/100 (30 sites) Bulgaria: 46.3/100 (16 sites) Croatia: 39.5/100 (16 sites) Cyprus: 42.7/100 (3 sites) Czech Republic: 43.4/100 (23 sites) Denmark: 49.2/100 (51 sites) Estonia: 47.1/100 (11 sites) Finland: 49.0/100 (53 sites) France: 43.5/100 (113 sites) Germany: 42.4/100 (448 sites) Greece: 44.6/100 (25 sites) Hungary: 40.0/100 (26 sites) Ireland: 43.8/100 (53 sites) Italy: 41.6/100 (114 sites) Latvia: 41.0/100 (10 sites) Lithuania: 43.0/100 (13 sites) Luxembourg: 45.5/100 (11 sites) Netherlands: 46.5/100 (157 sites) Norway: 48.1/100 (29 sites) Poland: 42.5/100 (82 sites) Portugal: 47.8/100 (22 sites) Romania: 42.4/100 (27 sites) Slovakia: 43.5/100 (19 sites) Slovenia: 45.4/100 (14 sites) Spain: 45.6/100 (64 sites) Sweden: 49.3/100 (34 sites) Switzerland: 45.1/100 (80 sites) United Kingdom: 45.3/100 (157 sites)
Worse
Better

Score by Country

🇦🇹 Austria
45.8 54 🇧🇪 Belgium
46.7 30 🇧🇬 Bulgaria
46.3 16 🇭🇷 Croatia
39.5 16 🇨🇾 Cyprus
42.7 3 🇨🇿 Czech Republic
43.4 23 🇩🇰 Denmark
49.2 51 🇪🇪 Estonia
47.1 11 🇪🇺 European Union
55.8 5 🇫🇮 Finland
49.0 53 🇫🇷 France
43.5 113 🇩🇪 Germany
42.4 448 🇬🇷 Greece
44.6 25 🇭🇺 Hungary
40.0 26 🇮🇸 Iceland
46.8 12 🇮🇪 Ireland
43.8 53 🇮🇹 Italy
41.6 114 🇱🇻 Latvia
41.0 10 🇱🇮 Liechtenstein
43.2 4 🇱🇹 Lithuania
43.0 13 🇱🇺 Luxembourg
45.5 11 🇲🇹 Malta
56.3 3 🇳🇱 Netherlands
46.5 157 🇳🇴 Norway
48.1 29 🇵🇱 Poland
42.5 82 🇵🇹 Portugal
47.8 22 🇷🇴 Romania
42.4 27 🇸🇰 Slovakia
43.5 19 🇸🇮 Slovenia
45.4 14 🇪🇸 Spain
45.6 64 🇸🇪 Sweden
49.3 34 🇨🇭 Switzerland
45.1 80 🇬🇧 United Kingdom
45.3 157

Hosting & Data Residency

47%

EU-headquartered provider

53%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 204 25.6%
Amazon Web Services (US) 117 14.7%
Microsoft Azure (US) 108 13.6%
Hetzner (DE) 105 13.2%
IONOS (1&1) (DE) 73 9.2%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.