Skip to main content
All Industries

EU Industry Benchmark

Healthcare

Anonymized security posture data for the healthcare sector across the EU. Based on 51645 monitored sites.

40.1

Avg. Score /100

D

Avg. Grade

51645

Sites Tracked

+1.0

vs. EU Average

Critical findings in this industry

41330 of 51645 without HTTPS redirect

80.0%

50721 of 51645 with unencrypted email (no STARTTLS)

98.0%

51532 of 51645 without DMARC protection (spoofable)

100.0%

11723 of 51645 missing 3+ critical security headers

23.0%

45091 of 51645 without DNSSEC (vulnerable to DNS spoofing)

87.0%

50343 of 51645 without CAA records (unrestricted certificate issuance)

97.0%

51451 of 51645 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
20 (0.0%)
C
913 (2.0%)
D
26781 (52.0%)
F
23931 (46.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.9/100 (2716 sites) Belgium: 40.9/100 (1351 sites) Bulgaria: 39.7/100 (327 sites) Croatia: 40.2/100 (255 sites) Cyprus: 42.1/100 (68 sites) Czech Republic: 41.7/100 (652 sites) Denmark: 42.9/100 (490 sites) Estonia: 44.7/100 (136 sites) Finland: 42.3/100 (368 sites) France: 38.1/100 (2540 sites) Germany: 39.9/100 (22001 sites) Greece: 39.5/100 (280 sites) Hungary: 40.4/100 (359 sites) Ireland: 40.2/100 (621 sites) Italy: 38.5/100 (1492 sites) Latvia: 41.8/100 (126 sites) Lithuania: 41.1/100 (259 sites) Luxembourg: 41.9/100 (92 sites) Netherlands: 42.5/100 (3271 sites) Norway: 43.5/100 (279 sites) Poland: 38.2/100 (3515 sites) Portugal: 39.0/100 (417 sites) Romania: 40.7/100 (543 sites) Slovakia: 43.0/100 (483 sites) Slovenia: 40.5/100 (132 sites) Spain: 38.9/100 (1920 sites) Sweden: 43.8/100 (280 sites) Switzerland: 42.4/100 (1671 sites) United Kingdom: 40.1/100 (4958 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.9 2716 🇧🇪 Belgium
40.9 1351 🇧🇬 Bulgaria
39.7 327 🇭🇷 Croatia
40.2 255 🇨🇾 Cyprus
42.1 68 🇨🇿 Czech Republic
41.7 652 🇩🇰 Denmark
42.9 490 🇪🇪 Estonia
44.7 136 🇪🇺 European Union
43.5 2 🇫🇮 Finland
42.3 368 🇫🇷 France
38.1 2540 🇩🇪 Germany
39.9 22001 🇬🇷 Greece
39.5 280 🇭🇺 Hungary
40.4 359 🇮🇸 Iceland
49.1 25 🇮🇪 Ireland
40.2 621 🇮🇹 Italy
38.5 1492 🇱🇻 Latvia
41.8 126 🇱🇮 Liechtenstein
45.6 5 🇱🇹 Lithuania
41.1 259 🇱🇺 Luxembourg
41.9 92 🇲🇹 Malta
40.1 11 🇳🇱 Netherlands
42.5 3271 🇳🇴 Norway
43.5 279 🇵🇱 Poland
38.2 3515 🇵🇹 Portugal
39.0 417 🇷🇴 Romania
40.7 543 🇸🇰 Slovakia
43.0 483 🇸🇮 Slovenia
40.5 132 🇪🇸 Spain
38.9 1920 🇸🇪 Sweden
43.8 280 🇨🇭 Switzerland
42.4 1671 🇬🇧 United Kingdom
40.1 4958

Hosting & Data Residency

63%

EU-headquartered provider

37%

Non-EU provider (CLOUD Act / Schrems II)

IONOS (1&1) (DE) 5925 22.9%
Cloudflare (US) 4161 16.1%
Hetzner (DE) 3345 13.0%
Strato (DE) 3182 12.3%
Amazon Web Services (US) 2264 8.8%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.