Skip to main content
All Industries

EU Industry Benchmark

Food & Delivery

Anonymized security posture data for the food & delivery sector across the EU. Based on 231288 monitored sites.

39.2

Avg. Score /100

F

Avg. Grade

231288

Sites Tracked

0.0

vs. EU Average

Critical findings in this industry

207360 of 231288 without HTTPS redirect

90.0%

227716 of 231288 with unencrypted email (no STARTTLS)

98.0%

230931 of 231288 without DMARC protection (spoofable)

100.0%

56926 of 231288 missing 3+ critical security headers

25.0%

190372 of 231288 without DNSSEC (vulnerable to DNS spoofing)

82.0%

226349 of 231288 without CAA records (unrestricted certificate issuance)

98.0%

230895 of 231288 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
8 (0.0%)
C
1736 (1.0%)
D
112693 (49.0%)
F
116851 (51.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.8/100 (10097 sites) Belgium: 43.5/100 (7599 sites) Bulgaria: 39.4/100 (615 sites) Croatia: 39.7/100 (1100 sites) Cyprus: 38.3/100 (259 sites) Czech Republic: 42.6/100 (5877 sites) Denmark: 41.0/100 (6473 sites) Estonia: 40.5/100 (689 sites) Finland: 40.0/100 (3855 sites) France: 36.9/100 (26177 sites) Germany: 38.5/100 (60039 sites) Greece: 41.1/100 (1678 sites) Hungary: 40.1/100 (1648 sites) Ireland: 44.1/100 (2575 sites) Italy: 37.3/100 (15609 sites) Latvia: 39.5/100 (427 sites) Lithuania: 38.8/100 (555 sites) Luxembourg: 38.9/100 (520 sites) Netherlands: 40.0/100 (19135 sites) Norway: 41.5/100 (2114 sites) Poland: 37.7/100 (7199 sites) Portugal: 42.1/100 (1847 sites) Romania: 39.3/100 (1359 sites) Slovakia: 41.2/100 (2350 sites) Slovenia: 37.7/100 (784 sites) Spain: 38.7/100 (10884 sites) Sweden: 40.7/100 (4142 sites) Switzerland: 45.3/100 (10570 sites) United Kingdom: 37.4/100 (24532 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.8 10097 🇧🇪 Belgium
43.5 7599 🇧🇬 Bulgaria
39.4 615 🇭🇷 Croatia
39.7 1100 🇨🇾 Cyprus
38.3 259 🇨🇿 Czech Republic
42.6 5877 🇩🇰 Denmark
41.0 6473 🇪🇪 Estonia
40.5 689 🇫🇮 Finland
40.0 3855 🇫🇷 France
36.9 26177 🇩🇪 Germany
38.5 60039 🇬🇷 Greece
41.1 1678 🇭🇺 Hungary
40.1 1648 🇮🇸 Iceland
40.1 295 🇮🇪 Ireland
44.1 2575 🇮🇹 Italy
37.3 15609 🇱🇻 Latvia
39.5 427 🇱🇮 Liechtenstein
37.7 39 🇱🇹 Lithuania
38.8 555 🇱🇺 Luxembourg
38.9 520 🇲🇹 Malta
39.5 246 🇳🇱 Netherlands
40.0 19135 🇳🇴 Norway
41.5 2114 🇵🇱 Poland
37.7 7199 🇵🇹 Portugal
42.1 1847 🇷🇴 Romania
39.3 1359 🇸🇰 Slovakia
41.2 2350 🇸🇮 Slovenia
37.7 784 🇪🇸 Spain
38.7 10884 🇸🇪 Sweden
40.7 4142 🇨🇭 Switzerland
45.3 10570 🇬🇧 United Kingdom
37.4 24532

Hosting & Data Residency

51%

EU-headquartered provider

49%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 26793 20.7%
IONOS (1&1) (DE) 18436 14.3%
Google Cloud (US) 15927 12.3%
Amazon Web Services (US) 14566 11.3%
Hetzner (DE) 12512 9.7%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.