EU Industry Benchmark
Fashion
Anonymized security posture data for the fashion sector across the EU. Based on 268 monitored sites.
52.8
Avg. Score /100
D
Avg. Grade
268
Sites Tracked
-1.0
vs. EU Average
Critical findings in this industry
20 of 268 without HTTPS redirect
9 of 268 with unencrypted email (no STARTTLS)
29 of 268 without DMARC protection (spoofable)
143 of 268 missing 3+ critical security headers
73 of 268 without DNSSEC (vulnerable to DNS spoofing)
73 of 268 without CAA records (unrestricted certificate issuance)
78 of 268 without MTA-STS (email downgrade attacks possible)
Grade Distribution
Score by Country
Hosting & Data Residency
11%
EU-headquartered provider
89%
Non-EU provider (CLOUD Act / Schrems II)
Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49
All data is anonymized. No individual sites are identified. Statistics updated weekly.