EU Industry Benchmark
Gambling
Anonymized security posture data for the gambling sector across the EU. Based on 326 monitored sites.
44.5
Avg. Score /100
D
Avg. Grade
326
Sites Tracked
+5.0
vs. EU Average
Critical findings in this industry
191 of 326 without HTTPS redirect
319 of 326 with unencrypted email (no STARTTLS)
325 of 326 without DMARC protection (spoofable)
108 of 326 missing 3+ critical security headers
268 of 326 without DNSSEC (vulnerable to DNS spoofing)
257 of 326 without CAA records (unrestricted certificate issuance)
316 of 326 without MTA-STS (email downgrade attacks possible)
Grade Distribution
Security across Europe
Average security score by country — hover for details, click to explore.
/100 · sites
Score by Country
Hosting & Data Residency
7%
EU-headquartered provider
93%
Non-EU provider (CLOUD Act / Schrems II)
Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49
All data is anonymized. No individual sites are identified. Statistics updated weekly.