Skip to main content
All Industries

EU Industry Benchmark

Healthcare

Anonymized security posture data for the healthcare sector across the EU. Based on 51501 monitored sites.

40.9

Avg. Score /100

D

Avg. Grade

51501

Sites Tracked

0.0

vs. EU Average

Critical findings in this industry

41843 of 51501 without HTTPS redirect

81.0%

50600 of 51501 with unencrypted email (no STARTTLS)

98.0%

51382 of 51501 without DMARC protection (spoofable)

100.0%

22767 of 51501 missing 3+ critical security headers

44.0%

44978 of 51501 without DNSSEC (vulnerable to DNS spoofing)

87.0%

50206 of 51501 without CAA records (unrestricted certificate issuance)

97.0%

51314 of 51501 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
6 (0.0%)
C
1329 (3.0%)
D
28326 (55.0%)
F
21840 (42.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 42.9/100 (2711 sites) Belgium: 44.3/100 (1349 sites) Bulgaria: 38.9/100 (327 sites) Croatia: 37.8/100 (256 sites) Cyprus: 38.4/100 (68 sites) Czech Republic: 41.6/100 (646 sites) Denmark: 45.9/100 (490 sites) Estonia: 41.8/100 (136 sites) Finland: 44.0/100 (369 sites) France: 38.7/100 (2529 sites) Germany: 40.1/100 (21937 sites) Greece: 39.9/100 (280 sites) Hungary: 39.8/100 (357 sites) Ireland: 43.6/100 (619 sites) Italy: 38.7/100 (1488 sites) Latvia: 40.0/100 (126 sites) Lithuania: 39.7/100 (260 sites) Luxembourg: 39.3/100 (92 sites) Netherlands: 43.7/100 (3265 sites) Norway: 45.6/100 (277 sites) Poland: 39.4/100 (3508 sites) Portugal: 41.3/100 (416 sites) Romania: 39.7/100 (544 sites) Slovakia: 40.3/100 (482 sites) Slovenia: 37.8/100 (132 sites) Spain: 39.8/100 (1906 sites) Sweden: 44.9/100 (280 sites) Switzerland: 46.3/100 (1669 sites) United Kingdom: 41.1/100 (4939 sites)
Worse
Better

Score by Country

🇦🇹 Austria
42.9 2711 🇧🇪 Belgium
44.3 1349 🇧🇬 Bulgaria
38.9 327 🇭🇷 Croatia
37.8 256 🇨🇾 Cyprus
38.4 68 🇨🇿 Czech Republic
41.6 646 🇩🇰 Denmark
45.9 490 🇪🇪 Estonia
41.8 136 🇪🇺 European Union
39.5 2 🇫🇮 Finland
44.0 369 🇫🇷 France
38.7 2529 🇩🇪 Germany
40.1 21937 🇬🇷 Greece
39.9 280 🇭🇺 Hungary
39.8 357 🇮🇸 Iceland
42.1 25 🇮🇪 Ireland
43.6 619 🇮🇹 Italy
38.7 1488 🇱🇻 Latvia
40.0 126 🇱🇮 Liechtenstein
46.2 5 🇱🇹 Lithuania
39.7 260 🇱🇺 Luxembourg
39.3 92 🇲🇹 Malta
39.9 11 🇳🇱 Netherlands
43.7 3265 🇳🇴 Norway
45.6 277 🇵🇱 Poland
39.4 3508 🇵🇹 Portugal
41.3 416 🇷🇴 Romania
39.7 544 🇸🇰 Slovakia
40.3 482 🇸🇮 Slovenia
37.8 132 🇪🇸 Spain
39.8 1906 🇸🇪 Sweden
44.9 280 🇨🇭 Switzerland
46.3 1669 🇬🇧 United Kingdom
41.1 4939

Hosting & Data Residency

64%

EU-headquartered provider

36%

Non-EU provider (CLOUD Act / Schrems II)

IONOS (1&1) (DE) 5917 23.0%
Cloudflare (US) 4107 16.0%
Hetzner (DE) 3338 13.0%
Strato (DE) 3180 12.4%
Amazon Web Services (US) 2261 8.8%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.