Skip to main content
All Industries

EU Industry Benchmark

Gambling

Anonymized security posture data for the gambling sector across the EU. Based on 322 monitored sites.

45.9

Avg. Score /100

D

Avg. Grade

322

Sites Tracked

+3.0

vs. EU Average

Critical findings in this industry

228 of 322 without HTTPS redirect

71.0%

288 of 322 with unencrypted email (no STARTTLS)

89.0%

312 of 322 without DMARC protection (spoofable)

97.0%

111 of 322 missing 3+ critical security headers

34.0%

264 of 322 without DNSSEC (vulnerable to DNS spoofing)

82.0%

253 of 322 without CAA records (unrestricted certificate issuance)

79.0%

312 of 322 without MTA-STS (email downgrade attacks possible)

97.0%

Grade Distribution

A
0 (0.0%)
B
2 (1.0%)
C
29 (9.0%)
D
221 (69.0%)
F
70 (22.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 42.5/100 (12 sites) Belgium: 46.0/100 (11 sites) Bulgaria: 44.1/100 (9 sites) Croatia: 42.4/100 (7 sites) Cyprus: 44.8/100 (4 sites) Czech Republic: 48.3/100 (9 sites) Denmark: 47.1/100 (9 sites) Estonia: 44.6/100 (9 sites) Finland: 44.8/100 (6 sites) France: 44.0/100 (20 sites) Germany: 44.9/100 (21 sites) Greece: 48.2/100 (8 sites) Hungary: 50.0/100 (2 sites) Ireland: 54.8/100 (4 sites) Italy: 44.1/100 (18 sites) Latvia: 44.7/100 (6 sites) Lithuania: 50.2/100 (4 sites) Luxembourg: 50.5/100 (4 sites) Netherlands: 53.2/100 (12 sites) Norway: 39.3/100 (3 sites) Poland: 45.3/100 (13 sites) Portugal: 46.8/100 (9 sites) Romania: 42.4/100 (19 sites) Slovakia: 44.4/100 (7 sites) Slovenia: 45.8/100 (9 sites) Spain: 45.8/100 (24 sites) Sweden: 45.5/100 (8 sites) United Kingdom: 46.5/100 (13 sites)
Worse
Better

Score by Country

🇦🇹 Austria
42.5 12 🇧🇪 Belgium
46.0 11 🇧🇬 Bulgaria
44.1 9 🇭🇷 Croatia
42.4 7 🇨🇾 Cyprus
44.8 4 🇨🇿 Czech Republic
48.3 9 🇩🇰 Denmark
47.1 9 🇪🇪 Estonia
44.6 9 🇫🇮 Finland
44.8 6 🇫🇷 France
44.0 20 🇩🇪 Germany
44.9 21 🇬🇷 Greece
48.2 8 🇭🇺 Hungary
50.0 2 🇮🇸 Iceland
50.5 2 🇮🇪 Ireland
54.8 4 🇮🇹 Italy
44.1 18 🇱🇻 Latvia
44.7 6 🇱🇮 Liechtenstein
41.0 2 🇱🇹 Lithuania
50.2 4 🇱🇺 Luxembourg
50.5 4 🇲🇹 Malta
48.1 38 🇳🇱 Netherlands
53.2 12 🇳🇴 Norway
39.3 3 🇵🇱 Poland
45.3 13 🇵🇹 Portugal
46.8 9 🇷🇴 Romania
42.4 19 🇸🇰 Slovakia
44.4 7 🇸🇮 Slovenia
45.8 9 🇪🇸 Spain
45.8 24 🇸🇪 Sweden
45.5 8 🇬🇧 United Kingdom
46.5 13

Hosting & Data Residency

7%

EU-headquartered provider

93%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 147 60.0%
Amazon Web Services (US) 56 22.9%
Akamai (US) 10 4.1%
Microsoft Azure (US) 8 3.3%
Google Cloud (US) 7 2.9%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.