Skip to main content
All Industries

EU Industry Benchmark

Healthcare

Anonymized security posture data for the healthcare sector across the EU. Based on 51765 monitored sites.

45.7

Avg. Score /100

D

Avg. Grade

51765

Sites Tracked

+2.0

vs. EU Average

Critical findings in this industry

34456 of 51765 without HTTPS redirect

67.0%

41055 of 51765 with unencrypted email (no STARTTLS)

79.0%

46164 of 51765 without DMARC protection (spoofable)

89.0%

17631 of 51765 missing 3+ critical security headers

34.0%

45180 of 51765 without DNSSEC (vulnerable to DNS spoofing)

87.0%

50460 of 51765 without CAA records (unrestricted certificate issuance)

97.0%

51551 of 51765 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
204 (0.0%)
C
3804 (7.0%)
D
34494 (67.0%)
F
13263 (26.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.4/100 (2722 sites) Belgium: 42.0/100 (1355 sites) Bulgaria: 39.7/100 (329 sites) Croatia: 40.6/100 (257 sites) Cyprus: 43.2/100 (68 sites) Czech Republic: 41.6/100 (662 sites) Denmark: 42.5/100 (490 sites) Estonia: 45.0/100 (137 sites) Finland: 43.5/100 (368 sites) France: 44.4/100 (2553 sites) Germany: 49.6/100 (22024 sites) Greece: 40.7/100 (282 sites) Hungary: 40.6/100 (359 sites) Ireland: 40.8/100 (620 sites) Italy: 40.6/100 (1494 sites) Latvia: 42.6/100 (126 sites) Lithuania: 41.5/100 (261 sites) Luxembourg: 43.1/100 (92 sites) Netherlands: 43.5/100 (3280 sites) Norway: 44.0/100 (280 sites) Poland: 39.2/100 (3529 sites) Portugal: 41.0/100 (418 sites) Romania: 39.9/100 (543 sites) Slovakia: 42.0/100 (482 sites) Slovenia: 41.2/100 (131 sites) Spain: 39.7/100 (1930 sites) Sweden: 44.2/100 (280 sites) Switzerland: 43.5/100 (1677 sites) United Kingdom: 47.8/100 (4973 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.4 2722 🇧🇪 Belgium
42.0 1355 🇧🇬 Bulgaria
39.7 329 🇭🇷 Croatia
40.6 257 🇨🇾 Cyprus
43.2 68 🇨🇿 Czech Republic
41.6 662 🇩🇰 Denmark
42.5 490 🇪🇪 Estonia
45.0 137 🇪🇺 European Union
41.0 2 🇫🇮 Finland
43.5 368 🇫🇷 France
44.4 2553 🇩🇪 Germany
49.6 22024 🇬🇷 Greece
40.7 282 🇭🇺 Hungary
40.6 359 🇮🇸 Iceland
49.9 25 🇮🇪 Ireland
40.8 620 🇮🇹 Italy
40.6 1494 🇱🇻 Latvia
42.6 126 🇱🇮 Liechtenstein
52.2 5 🇱🇹 Lithuania
41.5 261 🇱🇺 Luxembourg
43.1 92 🇲🇹 Malta
44.8 11 🇳🇱 Netherlands
43.5 3280 🇳🇴 Norway
44.0 280 🇵🇱 Poland
39.2 3529 🇵🇹 Portugal
41.0 418 🇷🇴 Romania
39.9 543 🇸🇰 Slovakia
42.0 482 🇸🇮 Slovenia
41.2 131 🇪🇸 Spain
39.7 1930 🇸🇪 Sweden
44.2 280 🇨🇭 Switzerland
43.5 1677 🇬🇧 United Kingdom
47.8 4973

Hosting & Data Residency

63%

EU-headquartered provider

37%

Non-EU provider (CLOUD Act / Schrems II)

IONOS (1&1) (DE) 5925 22.9%
Cloudflare (US) 4250 16.4%
Hetzner (DE) 3335 12.9%
Strato (DE) 3178 12.3%
Amazon Web Services (US) 2271 8.8%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.